last executing test programs: 1m8.301244931s ago: executing program 1 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x40000000, {0x3, 0x7c}, [@nested={0x4, 0x13e}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc042) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/92, 0x5c}, 0x10003) 1m8.010889332s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700839022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010060000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 57.088889189s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700839022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010060000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 56.505054813s ago: executing program 1 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x40000000, {0x3, 0x7c}, [@nested={0x4, 0x13e}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc042) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/92, 0x5c}, 0x10003) 45.639587779s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700839022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010060000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 44.585353189s ago: executing program 1 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x40000000, {0x3, 0x7c}, [@nested={0x4, 0x13e}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc042) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/92, 0x5c}, 0x10003) 34.602220945s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700839022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010060000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 34.03395431s ago: executing program 1 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x40000000, {0x3, 0x7c}, [@nested={0x4, 0x13e}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc042) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/92, 0x5c}, 0x10003) 25.859488135s ago: executing program 2 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007ea03d1", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4], 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000004300010000040febf300000000000000"], 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 25.47549417s ago: executing program 2 (id=1079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010126bd7000fedbdf25050000000800090002000000060001000500000208000c00aa0a000008000b00040000000517e4be0b74af670a09909a"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 25.235020439s ago: executing program 2 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0xff61}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x4, 0x80000, 0x10000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002000000", @ANYBLOB, @ANYRES64=0x0], 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r7, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x400}]}, 0x24}}, 0x4) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800010000000000000000000a0000000000000006000700080000000c000880060006000000000008000500", @ANYRES32=r10], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x8c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffa0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x18024) 24.239233039s ago: executing program 2 (id=1087): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "024000dc00"}}}]}, 0x48}}, 0x0) 23.767257774s ago: executing program 2 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdfc7317f8a3debda50cd51df2582e85c9f75632c4b00fe000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000c01}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000a0000003c000380080001"], 0x88}}, 0x0) 23.160305443s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700839022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010060000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21.86838429s ago: executing program 1 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x40000000, {0x3, 0x7c}, [@nested={0x4, 0x13e}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc042) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/92, 0x5c}, 0x10003) 12.822613053s ago: executing program 2 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdfc7317f8a3debda50cd51df2582e85c9f75632c4b00fe000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000c01}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000a0000003c000380080001"], 0x88}}, 0x0) 9.410799526s ago: executing program 0 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700839022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010060000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.088657296s ago: executing program 1 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x40000000, {0x3, 0x7c}, [@nested={0x4, 0x13e}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc042) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/92, 0x5c}, 0x10003) 2.87847349s ago: executing program 4 (id=1215): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001c80)=@newqdisc={0x240, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x208, 0x2, {{0x9, [0xe, 0x1, 0xa, 0x8, 0xf, 0xa, 0xf, 0x3, 0xd, 0x4, 0xf, 0x5, 0x6, 0x10, 0xc, 0x5], 0x0, [0x7, 0x7, 0x3, 0x3, 0xd0e, 0x7, 0x0, 0x80, 0x5, 0x7, 0xfff, 0x4fd, 0x0, 0x1000, 0x9, 0x7], [0x9, 0x4, 0x8, 0x40, 0x3ff, 0x100, 0x4, 0x8001, 0x9, 0x6, 0x1ff, 0x5, 0x3, 0x0, 0x5, 0x3]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xada}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x9}, {0xc}, {0xc, 0x3, 0x87e4}, {0xc, 0x3, 0xfffffffffffffffb}, {0xc, 0x3, 0xf}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x7ff}, {0xc, 0x3, 0x8}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffff8}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x4}, {0xc}, {0xc, 0x4, 0xbafd}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0xb8, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x7fffffff}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x81}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x401}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x79}, {0xc, 0x4, 0x7}, {0xc}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x7c}, {0xc, 0x4, 0x9}]}]}}}]}, 0x240}}, 0x0) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2"}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="e0bc234cd5c4c9ec3cfbd0bb575136799ab561c58c57f96700cce74307b1c9d5ebc38f948b6512d69fba2e5bfd53aac4408390f1df5ddeddea018d1607f1b7deb8c27790d73d11f459176658dcdc70030e1660d024ac76432de4dcff1fd2a44c1d64b87519eb19702117ba5b8095bd5e52b6bcae49e2f0ff35650af324a0703c6252af2167f1db35ff5e23e6a221dd566e9ddeea44510c16de52323854182fa1febf3fef8dea6230566a06", 0xab}, {&(0x7f0000000480)="2eac73bab191fa95cbe342d62391d2749c8d209db0d46d6fa2028761e33e93d053de8072cb02073e668160de20d43aafae28ff0af7cb91e1db5309e3985cd089a8f14a841586d3902b2bfe737bbae352b13ecd069dcb16bdbf760ca1c3801ea5d4b569f619a4a6588b31d2ddefa8e4da5e706b84ad31aa1ac43f528d6f30d750528341f1a40b37ee99f0aa7505732f7b10da584ba46801361ac537921f49fceb85238de8193f9e37c03554a779ee25f7e48929c8481fa6834c6e424767fef4bbb9549b7961f6e3f0", 0xc8}, {&(0x7f0000000980)="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", 0x1000}], 0x3, &(0x7f00000033c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @hopopts_2292={{0x1028, 0x29, 0x36, {0x1, 0x201, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}, @generic={0x2d, 0x1000, "e44ae6d948a8bb44da5792c2c3c5f9a4aec30570e073143e764fd0a52fe871f1526a866ca30d68c8f40377ad8776ad0a26a7ab9866428d4cb86924a85c91dfe57dd3179315e346833fbc67d3b9b5036b224e3f349b80efbd49b02f0cf3850aa757c162b532dd649a9990a735a1392f223c24834614ce6d2c85d04170aeda1e6a424898098c3c4d982c31494515dc13927898beb6e40597db0e58782ca9f999f5d66be968903e1167635e59b29fa28dc4bf34efc0a5a5b11f8b9d824ba258f73b668c59b147ae47ffe0931009cb053c44fcb7d20550861971784a380d0032f6caa189b9f04bde6739c6b5882e85f28296bb5cc9815b7ef14c037282d17f6a6ad415b788a2b4f9187a23ff64994b42e68f731da8feb112cf634798d95303cc3bc30a8679c7b71327b0add51383b46baf6bbd943615c9c5ddd070518d97bffe8838c8521161def163df9773a79aef34c5460992fad729de84038e63b63d6128e4b724dccbf522db021bb57fb57cc246965b8867177769cab759d62d04436c3cc7a95ae94837ec4c3ace6b1781654126da419141ec9755a2984331c6e67a25efbdd9972f0285e4783551227b4be286defc7cdadad916a3d8a099d0fea3a7e18daaf1319e08320bffe5d878dd63484b4c7d6c5a919dab6d286729ba9ba62f9ccaa4c9dc6925589766edf6589b8cd71bf8d36f3cf48b81e01932890d356e1a63acbb5bcb62030d8cfede2ea47cc53a30a519c745761358c9ec18ab90e74e3db4df7aa7c3c8e4b16ec477b98b24b5ff1e374e0d95904658035cac8ec7fdd406552e991894b20a64469e4024afc3128c00411b8be734ec9359c12a384312fc2c689aaca990f06c437fe4225e5a212679025bcd937b2a4dac683719786a8624e4653338e8c50ed3bb85d293ac5d4dda8bb91a47ed500581ae7a7a98f2388fbfdef7200c5714a9d4027a9b25d8ff9899a030285adf28d6649d05d4367f0251883e689185533e3d8f0bf308723a2a773444e110b0e615b5e41d01782b6ba9ba4e112369b7bfb4f29b2ae7bbc0935a04e1bb0baf5c1d619a200a5e2e42fb4fd0c836d1b5eda9db255c1bbff28095e867e70ebdf0707b90bb23a8b33e1e69cb26c7689327e07f539f275a0711ecf93fa0f11942f024765e96ce34388835f003c332b5321501f0964e8091376b957344502b59f9d7c455745e3366e237ea4396319592f76b1631436fd7a08d723b4e38a8ab486e4f2920c638ee1e564e486af6347429463e1fd719f5f205bf90e7c64d7d09d950159ff67cfc239c8062a303feebe499894153103f6266609fde593066df2aaf13bc6615ea0f80fde0ff9eb33bb6d6fbc814e07fbcf3cb867908efebfeb8ce4a85feec0dba55b5f9d6ab6248672ebaa081a8ba0bd05dedd1693b4697822a1f8f38feab4901a189f0cc7ffef259417e06aac889f34c63200483948064769ab24f14cd32c883b53c00f35f8c50938b0ec99c67e2a21998ed2ea7991796462f6f13b511933a10f14a95826e3aa794e5cf8de3e7ba00e084ee659b257f8e8b8f9a4dae05853ee422cf61aa69f4a3a8b36a8f06b53390b8776cc064c0658fbf5c6cc53710325ba756c8a08da61ecc3686e55f27e8f7ede8aae95de2ce08d38fab349361954bb4685f4ef5616c1fafc321845f07e92d33a88760693bc08652c71177e5dba5cc3a452cf6bf22ca169c42630b9249c066f606565300e1035df9d46130d95696a85ca90aa034bd92805971239c347dbde7b21b8e103acb6958bf9541b973bbc9960a10520c674b022d7f27420817af4556bff2d5a3048bf157fe8af3e1af2f05a8b1c9b00126d9b91382b5fed91be09a21700513c03008669ab6c7c7cff0d94c4ef757feb6eea7d304c0509441927d6cd1482dac1b3250430195ab75a1db3c40041b9b008e4d94dd20ce5e54c56c039baf6063413d8e542affdc0a90c1287f7730c34bdb1f1ffe832931b687c4ffed189086fbcfb0cfb27a9f5d6c279f27504c5f5683b6df22e518be0b97c16166a86285e202e9f08560f7df63ffef7b7d36cc3ea192dced43a126041d835ca46f50f1d610aa1ccd84325d184f44eeab7ae272e02d2ef575a94f2a6d542d488a7617766dc1529b1060c4a558ced77afcec491cb364ae3f2b919d6e6d57ab7adb43b50ed9d66d76b2ab46a433935f51f11bd3155a40ce73d283042aa593b561eeaac4108465a595377a2ec9a4113a84485e1acda8dcc5ba0c96db6aae01e48268519994581e5545cf2029ed6a86eb7023799128b5d2eab79ce7b24f355bd62a7c4ca4c634517fbb0511e11442966911a3da39356332159f4131eee07a936719595d906119495c390ac7b816197060259b7a118153a0774665333eec2134433cb4830f0a4c3fda721b7a4764a64a9a320f0f6c2da06a04d14a9aef559a8817697e8133695cf618ff9c520307b6c379ef22dc80824d7e6672bd5a2b502a4ed52a4ed363da60c9d81852587757fdfc0061dbec0b632ad621a09172cce3541cf05cd904d676505ceb0fa9665224c13568225fb6e982491e026436d5765d4176f66ae43adb3a0c61972273b487612379f4e53a45406c6c2e6f45c9f50cae231535d7b8c61c017fc36bd6f4d800342a44429ef6241a309f687061ac1b22576d91c8f487d3bee7e8a7a78dbc28d90a4ec04eb7d9ab524c77fd0281e1dfcaf497f895422c84755ba56945d6cf49978897425b370a33aade5971471227b19abdd66a04a1b819e7e2ca814c9278b5764082cdaae417f1c41326e74069bfb0586833059e609e12ab1b8e04ab425f9fc5ee32a418d992fef9632ca7d2381e9bd52d386c4b3eef0ff51008494e17426fd4cbad967675529e1fc230e47fb73a3870366395be61c8844e91462cbf1226f269ac47530b6bd910d01518e338d8524a8d564144910c92afa8c092f33acfe869328fac8664a2e5c6adbc683b560ccbc3dff4b551c27f5b51bbae2dbfca7fa68e9b657dfa9031c401e3d0662e03966892466e8bd5be1de2ab33f4060cdf230df3bf56eacce2ba0f5be81928b71b7a11c0537f9d03213d619dbbd7b11c933afb0fa86f06d17cdda147511d376b23526dabb445897cc4c389a3c702fdafb61733519f0543c2da281b4a429cb4b438e97a2a05ac9b59f82631bcb8f864a5a3457aa0c49afe9c16423bd7470f4ea4a4ed744e803f819abd7137226012ac89e0dcffd7b1ee9d9892e7b9009148b17f8fb34a815cf6fff1d32bf961a96b020a569b31829d1780fdc7cd7134b2effb4afd09ac154703355fbd8aed0c7a2d0b31e2d52a56514319bb34b4e91232f53ef966f72a13b95cde81b0b37548a00d854053a865431bdcf1b5b29e6b66b5e6844f5f5bf17271ef816d576a369a78332c513dacfdbab607a3f3f81ed4cb2d7c13097016f8835001cce137c6f4eb96f47abfd98e2f982176f891e85b83a209280521625d2f08becc853ba934a4be48d0e0a242182a6ee0df8acc1bbae8a4d4666b6d10633256a90c960cb662fcda312a445c42f4125334536cea11d1d283092ff66727842445955b9293df42c6b032ed78937b74360bd61781dcd1c7a4e100b984f49b088e9a948859a23a4b00a0e25bc9fd120869c1c1dec4a9d6eb1dbd74cf534273154b8aead11c1f5e65df1d4f41f4a78d5da972037aa84d384f88e770a7d5de690071008489af65f923c3de233b3e8d10a967ffde67f354f70352940bd1f105f88ee1d6797e71af177a23baf7fb124361854e5b1fb9438dd9317b07af9116652a90f68a10f84c35008bce7c8cc0704ed9597f2b12fc8730831c8da1a7fe30d0cca4520e8dd7c7bb1044ad3f5037e7cfa108ebca6e3bc7166d6d36878eafffe439aaaa71dd6bb548e9fd651b98da734a911d56f2ac94d979c7c5bde4f35ae15fd653b465d2d2578d28736f8d5aba4c89a12294cdb49b2d0f71808917cd6a589ce6e820eb515f9346a05b6b6ce4fd683b0ccf5a2d9fd84a33cb5595423d970f02e78c326e6e5d37bccf07a7d5b5d975f688eeb61024e96d3361993d272c9ee6999401ab29b1851466bf6f72e8f91d30b6bb69d723ee2222424cb3235526d4bace405b2ac3f6de58c67ff064fb000ddb48a029117eedfa7c397d89afd5a9f346104d0e9b955e54180017c73ef534bbc2f83a54e748cd2ab380e9e99d0071cbb9d646046d3988f07d38e4f9642eaf2c3e837931e76eeb7f8d7a5a7bab6225d486472b937b5dbaf0a81e80a308afbaba003c9036646179815fad67bec99397abe4e3618aa1a6f478751040bbb154d96e1abbee05ecd6dbcb633fe9ab1579b660dcaee7d02b539939d6d643153ed2e8ae0c9ab4105700cadb2bae0088ff3fd24f6b799e3f25043a36e40096c72fc76d82f351f7f9df67c2da48498ea18bb004ac409c7bad344b6bb77d4c7528496f14a532610dcb0d82403362e52e645173a27e12ccbf49036cac48c45d8e4d5306b0f0d1ccd6a91deca1ba872eb19dadd9cb54504f5decb3fb500a19da9e5ca6ff179e9ad36ef6809f1007a25150a0aeae9d0a9a2cf9ac556bd17d8fada4adc7c03cb058ca7fad034ca17c45743b368e6fffa13236125b0761ec5d2fa5f57e35a35d3717e8cd79ee9b17fd7e824ffcabb840d11f2acd86c17559c5b65f38353a555408fabe3de1b5b3a37ba9f92cce5d5952093fe75f41147aaea387738496ea65b19e2f7db6d39b9a8f604f44437a9ccc81e79245455f81346c7f2415ac66a4971a459afd97f531d19813b0abc654ac23224fe2c9a5ab5eb239196870bcfd2fe56b5036e1bf107ae9e799c6efcdff3f17da6d42184a2eb65ee1d47a02409ad035710bb91e9b1a77a344f77b90b22390909dc0f3b95909188b49d9765736597263b3404bd83e14fdd8e5bd3d7b74db83d39dfd372fd51a1f3224246d62c1c288a7cbcdc05595d1d0448df4c0dc60c802ee94f67e9825a970f92afa43c565a0328f7ddbe9d26023daf55b6996ac2ea453df96a34865f6680f4cf02ffd95498df2df7402ca5a7fb4ce8f9f0c46a049d636ac200dde40c2aa1a3ea420b48df391fc0c86918db91847b0fffa3c1ee2ef2ff9103a38e55b103230558a387ed0e74c2957878224227caac1fab5cb2d8bd475fa3c43ff29fb87389c25490e23f06778a886923c0ad1cf92823a7e9d59511cd176e64647ff1db2eb631422be6f0a040cd228c5e607f728a12e813a0d837b8b40d9a385dc85575dc01eb2da29f81258e2ebfd129112eab23971db65912204f9c1097710f4dcc6857260688f620ab3a3be4b9878cf5e44fae29c606687099bc612352b25dd9a809f993d7c8c52514e2ab3ceb3df66c35442429512b3b229f462137afde3cd2b47bf141f2a0074443409d4a36b7d3177b65b76071f5392814e35f73b8fea0e2ec407d51fa00d2fbaea4d1197725c79d75eedc6f7bcbae995f0c48101fcadb8c8a01420a89d5c29e1136025d256485220b3d4fecd475208bacdcd92046a29a7adf1a83d1f1ac06b2b66c10ecb4e443dbd67dd3deb3fa1f30850bec4d1fa90d2236a12e40d31de0511dee80737288575c4b6f04e85f2757202b385a1d9540f572c4d56aad59a015e232fe130d8f4e920da1c4d8f92b6c58ad5bf6605060d4cf45bb89611ebabf4ce02df0229a775c846d59cd7005b47015651d8b3e2d52505bae7a872b1407e35e0894a359748a637dffc359a173d827308e30472ba446c74d2201d5e5bcedfec2a0a5f4ed4772d3d2ea6695bbced04e83ef0b80f8ca84068b5604cd07ba82c43c1f44210be9f075daa64c4"}]}}}, @dstopts={{0xa8, 0x29, 0x37, {0x0, 0x11, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x5d, "bf22b6fdaefa90f6107ed8968b29c3ef160406f3d60fb7b40569fa90b7161be44bbd77509e035bbf72796df3022da677cdbe27060c743cf8baec5c237d8012f77b90605680fbe1bbd1578c1e8b3cb1c2e4076dfce7000de11771606bd1"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x9, [0xffffffff, 0xcc33, 0xffffffff, 0x9]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffafc}}, @rthdr={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x1, 0xf7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @remote, @mcast1, @mcast2]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x2f, 0x14, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x1000, [0x6, 0x0, 0xa5e3]}}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xfb}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts={{0x38, 0x29, 0x36, {0x89, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xe64b}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}], 0x12a0}}], 0x2, 0x14) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000080000000000000000000003000000000100000003000000020000000200000000000008"], 0x0, 0x74, 0x0, 0x1, 0x8, 0x0, @void, @value}, 0x28) (async, rerun: 32) shutdown(r0, 0x1) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}}, 0x400) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) (async) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) (async) getsockopt$inet_tcp_int(r12, 0x6, 0x2, 0x0, &(0x7f0000000340)) (async) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001c00)={0x0, r12, 0x0, 0x8, 0x9, 0x2}) (async, rerun: 64) bind$inet6(r11, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async, rerun: 64) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bind$bt_hci(r10, &(0x7f0000001c40)={0x1f, 0x2, 0x2}, 0x6) (async) sendmmsg$inet6(r11, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="901240c26659aa57acb9e3d346635b8eef5a402800000c00000000000044a8b4e34a7a03174053bbbdfbfe1a67b393a01c767dd5c1c1a3dfb3938e3fb03f8c9f0fe8233600", 0x45}], 0x1}}], 0x1, 0xc8040) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) splice(r11, 0x0, r10, 0x0, 0x7ffff000, 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xa, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000740)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x60, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000001a00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x2, 0xc, 0x0, 0x5d2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a80)=[r4, r4, r10, r4, r4, r4, r4, r4, r4], &(0x7f0000001ac0)=[{0x2, 0x2, 0xc, 0xc}, {0x2, 0x1, 0xa}, {0x2, 0x2, 0x1, 0x8}, {0x3, 0x6, 0x6, 0x1}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x7, @void, @value}, 0x94) 2.340653062s ago: executing program 3 (id=1218): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x35}, 0x8001) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) recvfrom$inet6(r4, &(0x7f0000000680)=""/254, 0xfe, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.886939067s ago: executing program 4 (id=1219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)='g', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r4}, 0xc) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="75040000", @ANYRES16=r3, @ANYBLOB="000026bd7000fcdbdf25820000000c0099000100010007000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000000400000000000000b703000001290000850000005f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_FILTER(r12, 0x6b, 0x1, &(0x7f0000000080), 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d6163736563300000"], 0x40}}, 0x0) sendmsg$netlink(r12, &(0x7f0000000bc0)={&(0x7f0000000880)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc, &(0x7f0000000b80)=[{&(0x7f00000008c0)={0x10, 0x17, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}, {&(0x7f0000000900)={0xb8, 0x2b, 0x300, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0xc3}, @nested={0xa4, 0xbb, 0x0, 0x1, [@generic="7df836f2baa257693ce87bbf73edd42713682228263c217a4808f5c9a08317e3580a56a13e85c5d6619354ba8ddba60251e16adca3874a0989c02f6dd15920776d00b644c9ac55247c81ee8031e61e3967256422b90f153024b6e02b515e4eaba2ac89c2f92efa4feae3c3ad261cc006e6229d08a0333baa5b9c5dc3884cf2fb95a9735135b71c9a7cf36a9d3079b5678d959c727fff5e51d66dc0ce0a228b19"]}]}, 0xb8}, {&(0x7f0000000a40)={0x108, 0x14, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x8e, 0xf7, 0x0, 0x1, [@generic="b1c67f43fab9b56cf7d2b56e906c2f38f8cb25de932d44c4d9c8648524d49b54b9fc572ac67e5fac2b5ecb27ff394ba2bb0e02df89831f065c40da1c512bd19fa6722b35849f1255a9e4e3b57e2bef1c9aec36c5ec3b1c89d4a7faaf9f0869ca9fd96a7b015bcf234af127ab2919b872cb2f8ae782c4156b7f7e22af1ce1913f6406219f1eb37c892c2e"]}, @nested={0x62, 0x23, 0x0, 0x1, [@generic="7845234aaebb11e494b428b0368ab2badc2ff00503a27aee4efb69ad74f14896066c0cc4f985d96f9406db6263ba3ed386dcbab47552aeaa69532635f1ad776260e2823698f2037028ae38325af0235408ebe08bc0c5", @nested={0x4, 0x5e}, @nested={0x4, 0xda}]}, @generic="76ea"]}, 0x108}], 0x3, 0x0, 0x0, 0x50}, 0x0) setsockopt$MRT_DEL_VIF(r11, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) setsockopt(r1, 0x8, 0xb6bc, &(0x7f00000005c0)="98e8c98a3b42092f4175dd84383de61459d8b419983560c8234063df9cc32986906780f3dda026512c9f1ea6f0ec2e03fe1a63784128f08ae60e8dd513ba8b212a53050dbbf1148a57ecdfac595c0f27a8b6e676b5789f4e4e0eec382a51f34657fb294aa819b2d998d6129fddc5edd1ade75aa35980807c5c0280965e28b9785b52c645b15ce6ad7721e56549f300a4", 0x90) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c020e00", @ANYRES16=r10, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20000851}, 0x20000010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.667491594s ago: executing program 4 (id=1220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) (async) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0xfe01, 0x40}, 0x4040880) 1.449353853s ago: executing program 3 (id=1221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x10c, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x7f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x7e33b96c6e51bef6) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4814) 1.290640426s ago: executing program 4 (id=1222): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007"], 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xf}, &(0x7f00000000c0)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x11a8, r5, 0x200, 0x97, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc88, 0x1a}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x5}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="611403e7c6b0cf2f1a0dca37d8"}, {0xb, 0x0, @random="2d7ba0b33b52c9"}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0xa, 0x0, @random="03cff407a1f5"}, {0x18, 0x0, @random="ed025e3f0f8408bb3490fa429912e0a156929601"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x74}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x21, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x74, 0xe}}, @gcr_ga={0xbd, 0x6, @device_b}, @ibss={0x6, 0x2, 0x7fff}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xad}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x109c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x91, 0x2, "dae2921834d64fbcbeed6016a84bd86c73fc385d04fcff55d4b8abd9e714c85d069bb5fb0823abdcc446117bafbd23a26a5d60d8e1424f56d710ff16796c1c3949640d2c7577865e19b6c5985e5b9fabc8db33dae737e5c53fac191336e6e14b2380e92db7bcd705b38bb615f0a0f07eee9ea39638717bbf7c5d5d4ab80089ddead56e2b831c6ba2d33c55c321"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "01a22146362ef061bda189fe033774601618ae4a813af0897d8efbe6da48aea0d117257c9d12e14586da0b042d08de51db5858ef275b6b3be2900f37630a35287f5e38ced7e222e0e26821e2102b0ac3b80e8c1175c9a5409f86d3eea057174ff3a2862dbdb8f96ce7a88c1344469c64a2177bbf834f89704954ae9b49ac6cac571f949eb45bdf2a2de714ec429abd09c536f2f3162706f20d21e813ec1136822927b7987658bac85884abd67752594b6fde6755e2269c3a8a316388f366dc198d1d00f4f9212bb50a71864bd9dfc9975ea276389ba58f3233cd4dd51d541d564107faf8a0dce0b38103f59e0fc442bf56e73878f4e4bf28b4f3cf2d115bb5becf3f87043253a36b70d1ec42fc9742dbb4d208e274b1cea39c106b3c4ab4da6cc792382b1dd4d2f35872959ddc24ee5bf721a26f6aa07021550ae3c738be0320eaed38f945b9f16c3a14652ad1a9641ce94a42927d4e11e5571c0dc7a4a2b59f091aebabbb06a7ffc4e9825ebcb425d8fd5e2dc8e6a31406a44f967e76e246380acec062f7476db6694696d7476a60e98149a3b55859097686206b9b21be0196d377c56477b1d251f033b726bf85725019abeafd02d71ec9ab964f641c9688376637e87d9b80971f7208b1f162d5f8f44e636dbcb3e681415d5649f3bfd518269c5ba2cc0d545068194795aadbb909185f64b2d6bce7ed5b633f2798096c241aa098378f4f04e3d5a1211008777568e23447c5e61de8183bcacb71970bd7cb1cc2ebb8ce2221cae2da82f1b65fca9e0823836a3ddea88be8e3f962148c7ac78493699c61ebc7fdbad95594c0b10d2c2ea40759dacd810fb58e4537247cb54365bf0b9078c16eafcf87e11b10fe1802cbb7b7646ce5ab8f248dbfd05ca76b55f6ef23dacbdbc8e99be1af54c4865433229062bde8bd63835047797ef9e27c93df48b9187b987a39ecdea8027cc72c81b9a45f893b2e1df271d7c421587ed6d466f29fd9a7b6fb44067137a993aab8fa2a4ee2f76bcc24f0e07321a4fa9dcf824f14e20122189311af2971438c8d7cdfdd5d8f4eb8f414465e89015b82bc123b334017fd292f77af45e00f159eeb62b894f808ed19b5ec3f6e0705a9036f548ff5ff353bbf08499e22ad51174a77d56f29bf39245473b153feb028570f0b7d21df0f1d7c0a19be5c0cebd99771d8ce3a1d6ccce19145aaf0b2aea883a61b67ccfc6d2c0b8b2e71ec7f867a8833bcbf91f738c8ee042a90124bdff21d66c5d884c95ef0e28241b89fe897235dac8195c64c189192446b4ce93ea5c4768c838a751e0fc95c02a2afd0bd64aca34fa347987d298a4b95caa9609108ec70a61e7ccb8bd48f0b4441d61db65b5a23de0da3afd2c41f68bf4bcb01e85508b52076f1f105f80f45eeb33ada5a270af9eb65feb90399b897597b210998cf940d644b8e12b25422f4c66ac765379241281a072f6254df2b15ff014d415adc2f74323473991ecbe185899a4c0bb276b8f60cd96849dd586df1efa68a8bfc79f744d6208ffc0c85610532a8c41a6d4646d233c815968144c1f438f1061abf4c1271a1defde9dab5a35b3196298091d4beb1fb1b834901433312297446acb74bf812940b87db53e3f0961026f572edced1a97d3063e0a74dc82dc12acca083e1f937e926491a5ab6b5f37d0c6907c3933a84289ab0b81a2669a42a83b2645f039bd12005e7ac5889ba030c047a78e77324fd6ebf2048834339fcf1efd0fbaa762bb6ca49639a9ff59fea43883566e297a9cd3c75a9138268b6f70351368a21d3a503db67f8de01bcb1332fd4b50de840d210d490cc48b712dd5e22e45c393dfcb49aa6f1db9554f4b8d2cbfa4553b39285c31eeb2f9ee801c24c51ad8a2d7ed31bb394db5bb85dc0598f0a82b739b46ebc83d153ff6c599bd419fa46ef22a36fa2c88f450448d69941eb23b0a04cface62b05d039691e1e3a3bd111dd59788967dc1204fab7949367ff21a7212695a0863428a697bb19a8c074409c279f4221526e0b5fa5242f0c5cad2468087d98b5c796b10b76067872797463928fc1bb56c17e0a08f67ac264632f4d29b7031ebd98cce8edf96dee42077bf2d9c16c658da908ac24743eaa67325bb3da98eb992ced3d7376010b0b33187e4569071730ca70e3650c6eac8234bc4b899b222f4eece76f5a7220075078b0847fed9344616d4b0792f515c581c471d219ff8011394972092a749a1ad59745c771e96fc2ea9bc48a63910dd3497f746b1ff8c87e55488cc061992955e511557b30a2c8c4f09487b20cf6066b2c17c8f9a84c1ac26b5e497bccfbea8582701af41ed70f1fb282a4294e5d09cb55cc3682c575d28880e418d8a9a889888d1b6286f98a4fe0ee2524c3a6319658736fc923aeccddce63b68e859a9ca90d486b2b903c44d9b46259ece1a4a0da03b1d2a82c8dc62a98eef741d12fc24d969f059585c691848277de3ec20da15bbeac2d5b688e5220f049429840ebb2528eb386fa0e7e50949119a8b06bcfe807b6a66692405f0bf973507462c37d1007f05ef8defee3c4b1681f7899f96fa8ecf58fec28e144c78511cba3bd21f38509adf9b55430f1170f3ab89c04debdc0be440a2f95fa00053fddfc65389851be324609c4dee4a023616a9b8fa8ca86e1170961b03498788bf3a7590db5950b09ca91dc49fdab27fe1fae923697f3eaeab54fc4cdfd47b3c33c4a58eaeed6180146f84b71f0fbadae28ba75b29f52166f640f6482b4532f24fdeb27c9ed61e8d6386bf220a168c80dcf08055dd31789fad13666ec89ddcb3649a9515874f2b1ee09e821fc0e893e6b2f931256d353e61a79d239f704c73ce7c81a230e026768a55c75676c919bf4b5e17321aba0a39080e6818b10242e7676de3d56e14f716745fe70291feaf5d2eeddb4da11e26ccc739ada64b2182c28aad7d015b83582d76906db3787681bcb1633ea9f74bc594667c3b4153c11080b8a029857a5c98854bedbb97712addb53072c70986d48ada4c06ab48ac600688fc242a04772fef34ca6f877821234b4860bc065149415589a20df4c565e2c17aaa80f48f8043fc27874f58ae70a957f21138616e61d65426725e49067cfdd00f4661c7df3028300eb4fb54920ca0df505f7e9fe7fbf8bea57ef315483bb2a59a4d2c03a565ed9a003647063a681d098b4da560c2c0581c34fcbb96fa4588ed40f10e3b0873b3f8d0c7fa2f6fdac8dfe418cc8b64f57c1b8990f0dcfd520904068d2845529a0214b30499e2efca6a05063502b308733d2f4123149b042d14c68cc0d77ccbc1bf3022f1a1a29e00a47debdad2d5fbe447a43243317b2f882eff67dfc067d3d37c5980ba8e6774b0f4a8f68a02b2c41180199706c75722009530ce75c7a7ce4fb20c5cdacb0b9bd59c4f42d412a6218e17c5e9c299c7863ab03797c0b2d9c08c1b608ed93ced8f1ba8f1d2ea9e2c7e4fce2fd8326c8ffba7d04957460f1727c2ea5c700996bfe5546b48d3465c0a7fd9bdd09e2024926f965528670f99f32fc354496f412711dae71664247c4816260fe42b48ab8a44531a3c9845be124aee71aeba9d496c404d1a5542c8227cb6963168d45fc707f1789b20fad134f67f0802cb9aa8ec16afff08689584e27ea89b2fcb7ab461170050b76747b96bcf98c990c2694d22c197bac515a8ac3fba09a239f7fd91ca8ec4420e4c174c685c7505dc0abe2e880a88f1f9a2ee4ac5f6f3818dddb6628f22a61976f3db10636dd821d809968df6eec9e920b0f35ebb501448ec767fd395887256bd575ed9f0521401a5e6443c7a2f4d40fdbc6de9faff5bd10b52b0c70a157d40512b29aa721324a6dae8547bc5ee030126848579c90d189efc4cc4a876b5df6b465af444f7706182aec9f19b0da89db493e19e882416ea3d7018deeb7c36ed76bca8900fa471d7976a0b0bb3970438b5fc722faa7e1f80abc5c6d42cfc9273bc4bea658929ea5ce7bf6277895a1b9afd197a705950d3de7a01c170199c015febb2ad03e3b1e5240d89c9ccb1fc6751686ec1f2955ecc925822acf76608b8bcdd42b3559abb7ac27d5531c7c48cfafe9e0aee313019f3c06a81f7944e1e6508dbfbfda87c720b488d84a291bafb711170837cfa101217764c5e084bbaa292f3f6fee73db336381cd6081c997074372772fb3a4339acc54df8484919886ef55fd66ffc234caa62d22e4d65d36a5572892e35fa22b4ad25d73626f47f5b421d1004975652fb4171db675008a89f738150b408969dc8579e92ef9974b2b435d52fd864ca795e3afed67759d0a7b72869c6081fae7a7aaed1ef276599e33e1f27ffe08545c975b9964642962136dec3bb78c72793bdabe6346936a4900098aeec8b305341e280f34402a1cf4a31b241addb460117d27f2bc80c33f2b412783c40ba6ca40607b1a7a9ba0306dc4941d24905d632857b78177211f4e629908ecc7d7299bf04bf652799fbc3351c9f8065ce64104390828bfa1aa77859fe56f3d1fbc2c8d8cb3665e0abe1060ec8566d7b394cb90ca7947d6e3fda55cd05ae63ff397935be1387ab9621cb29030677a193f6e758795e46e9429de35f0c03c7628cfc8b0021100a86218546b03fbd8176490b0731b58ab50e4b56b9c8ded0dc3e28e5d80d0c66708e1b6b9f38d6deb12de483162c94d1b4745d96cfe2c90a98b2cda6aa17344858ed8ed377ca0fba14a92c232926640bbe9383d134438f5bc9ac93a327bf221cd7b51c47b618ff962b0e404ba11e12f1ca0796dd8273baad36aee82f2498ef912677f1025f763efe68aa7c75f5b6ded3b185d0285580c9db0945d4450550c1980fa5627359d0565db3ebaa667a8c132f5e0f390513fc84a6363c82c4b917be477334701f28304126b0525a2364318acb609432720303b2062e5f2538168f6d62414ff730bc2f8695ca3a5dfdd88324ef43a19f568b4d20975596079bd1e25522dab9f58a2b68019ebec2d49e6d0f7d1b211c9e98d1a4b98b7723083d020618f23eeb46682cc1e4774050764f58d34850a01c536864e881ef661f22435a8529b71e5ed630c51d479c74ed2456d4df1157fc051266099ebe8f1556c73d28c07db606ff045f39854b38fa3d2ee4572f55c0e42e53ae37508db24a61e4702305e98c4f04056d54db4361655f18ae374346690cd548e029c40f223c87d27c557bfba8496b1b176beca100b9cd014c0d2de37e43f5dacca9fe6157f561d83697cecdf6b051533ba6e247b55977ea5e0bba2e90c79ffc7c531be5549eec9215900838917c083eed750ae0fc4801a82b0f4914e9da58c20924a359172496b7d0969788e3556a3a9b19c169c018ba646cac1573d8add5d39c038466589190be966645dab38102c77f9ee06c0ff8f35c55f60eadac6fac2b21bdf9c792da3f89f08516e7d0fc363d1e9267eff991fa150a9cd3e470a160fbba90d1210ffe01eab057f6f01bdd1e8b5817495c3f055f62cf6edd4b32c45256be2717552776232307f26496c54eff9af3e70d2e3edf2ee4fa9db8d79d00ad9bd4501ee6db133205c2c56c8b9f579aa8bfaa397f24cc69abfba2b986ba3bcc3c4f5afb476bad4d70280b3049bb345f3d91e5a9958c6636ac7955aabf97fd462fd5ae618f7e6341a60ef6fa4c5508b8a15bf392194dfe1a6288cc6edce9164d31936d3fe6ea421c46ae7cd0e1238e3ccb1cda7b000c03cefd325caac7e7f38e704e989e679ffd9a7e1e836a5de70c1ef5fccd45aa17aaecb422c8f0113b48b474cb8351e79b6f1e2c73e46370"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffffff}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x10000}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x4, 0x20c, 0x6, 0x3, r3}, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1.275152191s ago: executing program 3 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x141}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 1.216698556s ago: executing program 3 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 946.681371ms ago: executing program 3 (id=1225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000b80)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB="95fbefe9a59746a3b96a2db2872d31b4966944ddb1e5e4693a3cc3120c204acf1699d439ceb7982077d74649d3621fec21d5bca58e04cbeec5c24f9926682d57c7ea051c4d8095c1ca806d46d291b233de608755ff0fac231d69dd14bcc5537616fa8ddd19e1e8a634473c95ea4dfc825ed8d6f0af0d67227694f6f510e74bb159492bc34dc9444b0c0784695a2bd229729f66c31c13be9b53113b50d8879931b30be4a21e9bdd962259c94ac52739fade47631315af6434148a3c2c3fa55a9197bf5401efd51c0d27fa96"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3f, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @remote, 0x3ff}, 0x1c) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) read(r2, &(0x7f0000000200)=""/163, 0xa3) bind$bt_hci(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)}, 0x2041) socket$inet6(0xa, 0x4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0_to_team\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) recvfrom$unix(r6, &(0x7f00000004c0)=""/208, 0xd0, 0x10000, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x218, 0x238, 0x238, 0x218, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @private1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r11, 0x81}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYBLOB="854e995403ed4f33d854051c3a2f428886e2d714901bf43d9f7aac7d48c614c14c0af38c0511ae5e9b447b506865ce5481e252bc7917be18548e1b001a36489546d9bbc6438444519f11a32cc42c9548ab68481b04e51442552d57ca290165670474c00ecbb8b5ed28a253287f1e6438ee23bd6a98164eb3120ef2a9e7ef41eddba0b4acfaafd98d2600d1ca17ede1668aea5a299be79d2c80a74e759eb31566e2e87a1a33a9f48f8f1d", @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r3], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 427.394978ms ago: executing program 4 (id=1226): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0xfffff67c}], 0x2, 0x40000022, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x44811}, 0xc010) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000240)=""/163, &(0x7f0000000080)=0xa3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0xfffff67c}], 0x2, 0x40000022, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x44811}, 0xc010) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000240)=""/163, &(0x7f0000000080)=0xa3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 260.546486ms ago: executing program 4 (id=1227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x8001, 0x7f573e26, {{0x24, 0x4, 0x1, 0xc, 0x90, 0x65, 0x0, 0xb, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x20, 0x0, [{0x5, 0x8, "a81ef15750f3"}, {0x0, 0x12, "b6fa1a1ce7cc1513149d9a70c6e7ce1d"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x89, 0x3, 0x6, [{@remote, 0x7f}, {@private=0xa010101, 0x7}, {@private=0xa010101, 0xdea}, {@rand_addr=0x64010101, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x2, [{@loopback, 0x4}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x40000000}]}, @rr={0x7, 0x17, 0xc4, [@private=0xa010101, @local, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x7c000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x12, 0x6, 0x20, r3, 0x3, '\x00', r4, r5, 0x2, 0x3, 0x4, 0x6, @void, @value, @void, @value}, 0x50) write$cgroup_type(r3, &(0x7f0000000400), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x1407, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x58, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c4}, 0x10000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) kernel console output (not intermixed with test programs): e bond0 [ 141.719909][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.759254][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.789289][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.811659][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.818852][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.839736][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.846862][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.859158][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.866325][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.897373][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.904591][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.349086][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.377698][ T8519] warn_alloc: 1 callbacks suppressed [ 142.377714][ T8519] syz.3.697: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.409532][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.3.697 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 142.409555][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.409565][ T8519] Call Trace: [ 142.409573][ T8519] [ 142.409580][ T8519] dump_stack_lvl+0x189/0x250 [ 142.409611][ T8519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.409634][ T8519] ? __pfx__printk+0x10/0x10 [ 142.409651][ T8519] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 142.409668][ T8519] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 142.409687][ T8519] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 142.409706][ T8519] warn_alloc+0x214/0x310 [ 142.409731][ T8519] ? __pfx_warn_alloc+0x10/0x10 [ 142.409758][ T8519] ? __get_vm_area_node+0x28f/0x300 [ 142.409775][ T8519] ? fq_pie_init+0x430/0x840 [ 142.409794][ T8519] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 142.409834][ T8519] ? up_write+0x1c4/0x420 [ 142.409849][ T8519] ? tcf_block_get_ext+0x8d4/0x17d0 [ 142.409870][ T8519] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.409892][ T8519] ? rcu_is_watching+0x15/0xb0 [ 142.409916][ T8519] ? fq_pie_init+0x430/0x840 [ 142.409931][ T8519] ? fq_pie_init+0x430/0x840 [ 142.409944][ T8519] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 142.409960][ T8519] ? fq_pie_init+0x430/0x840 [ 142.409974][ T8519] ? tcf_block_get+0x67/0xa0 [ 142.409990][ T8519] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 142.410011][ T8519] fq_pie_init+0x430/0x840 [ 142.410029][ T8519] ? __pfx_fq_pie_init+0x10/0x10 [ 142.410043][ T8519] qdisc_create+0x7a9/0xea0 [ 142.410067][ T8519] tc_modify_qdisc+0x1426/0x2010 [ 142.410101][ T8519] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 142.410155][ T8519] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 142.410176][ T8519] rtnetlink_rcv_msg+0x77c/0xb70 [ 142.410197][ T8519] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 142.410212][ T8519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.410226][ T8519] ? ref_tracker_free+0x63a/0x7d0 [ 142.410245][ T8519] ? __copy_skb_header+0xa7/0x550 [ 142.410266][ T8519] ? __pfx_ref_tracker_free+0x10/0x10 [ 142.410298][ T8519] netlink_rcv_skb+0x205/0x470 [ 142.410318][ T8519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.410337][ T8519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.410368][ T8519] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.410386][ T8519] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.410410][ T8519] netlink_unicast+0x758/0x8d0 [ 142.410437][ T8519] netlink_sendmsg+0x805/0xb30 [ 142.410470][ T8519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.410491][ T8519] ? aa_sock_msg_perm+0x94/0x160 [ 142.410511][ T8519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.410529][ T8519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.410547][ T8519] __sock_sendmsg+0x219/0x270 [ 142.410571][ T8519] ____sys_sendmsg+0x505/0x830 [ 142.410595][ T8519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.410623][ T8519] ? import_iovec+0x74/0xa0 [ 142.410644][ T8519] ___sys_sendmsg+0x21f/0x2a0 [ 142.410666][ T8519] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.410721][ T8519] ? __fget_files+0x2a/0x420 [ 142.410738][ T8519] ? __fget_files+0x3a0/0x420 [ 142.410765][ T8519] __x64_sys_sendmsg+0x19b/0x260 [ 142.410788][ T8519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.410819][ T8519] ? rcu_is_watching+0x15/0xb0 [ 142.410844][ T8519] ? do_syscall_64+0xbe/0x3b0 [ 142.410863][ T8519] do_syscall_64+0xfa/0x3b0 [ 142.410879][ T8519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.410893][ T8519] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.410906][ T8519] ? clear_bhb_loop+0x60/0xb0 [ 142.410919][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.410928][ T8519] RIP: 0033:0x7f3dedb8e929 [ 142.410939][ T8519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.410946][ T8519] RSP: 002b:00007f3dee985038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.410957][ T8519] RAX: ffffffffffffffda RBX: 00007f3deddb6080 RCX: 00007f3dedb8e929 [ 142.410964][ T8519] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000006 [ 142.410970][ T8519] RBP: 00007f3dedc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 142.410975][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.410981][ T8519] R13: 0000000000000000 R14: 00007f3deddb6080 R15: 00007ffd1f8218a8 [ 142.410996][ T8519] [ 142.411052][ T8519] Mem-Info: [ 142.835091][ T8519] active_anon:4694 inactive_anon:0 isolated_anon:0 [ 142.835091][ T8519] active_file:1240 inactive_file:39857 isolated_file:0 [ 142.835091][ T8519] unevictable:768 dirty:89 writeback:0 [ 142.835091][ T8519] slab_reclaimable:10897 slab_unreclaimable:95129 [ 142.835091][ T8519] mapped:29086 shmem:1367 pagetables:959 [ 142.835091][ T8519] sec_pagetables:0 bounce:0 [ 142.835091][ T8519] kernel_misc_reclaimable:0 [ 142.835091][ T8519] free:1334473 free_pcp:15277 free_cma:0 [ 142.883103][ T8519] Node 0 active_anon:18580kB inactive_anon:0kB active_file:4960kB inactive_file:159228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116312kB dirty:356kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11648kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.883893][ T5845] Bluetooth: hci4: command 0x0419 tx timeout [ 142.940992][ T8519] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.976062][ T8519] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.016205][ T8519] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 143.028224][ T8519] Node 0 DMA32 free:1418664kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18544kB inactive_anon:0kB active_file:4960kB inactive_file:157412kB unevictable:1536kB writepending:352kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:39840kB local_pcp:23340kB free_cma:0kB [ 143.067011][ T8519] lowmem_reserve[]: 0 0 1 1 1 [ 143.071776][ T8519] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 143.103517][ T8519] lowmem_reserve[]: 0 0 0 0 0 [ 143.108367][ T8519] Node 1 Normal free:3906240kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19104kB local_pcp:10624kB free_cma:0kB [ 143.143368][ T8519] lowmem_reserve[]: 0 0 0 0 0 [ 143.149367][ T8519] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.162661][ T8519] Node 0 DMA32: 1504*4kB (UM) 319*8kB (UME) 94*16kB (ME) 132*32kB (UME) 43*64kB (UM) 58*128kB (UME) 20*256kB (UM) 9*512kB (UME) 12*1024kB (UME) 8*2048kB (ME) 331*4096kB (M) = 1418648kB [ 143.183194][ T8519] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 143.196125][ T8519] Node 1 Normal: 188*4kB (UE) 54*8kB (UME) 39*16kB (UME) 74*32kB (UME) 27*64kB (UME) 6*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3906320kB [ 143.217934][ T8519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.227848][ T8519] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.241294][ T8519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.252463][ T8519] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.262205][ T8519] 42461 total pagecache pages [ 143.266948][ T8519] 0 pages in swap cache [ 143.271101][ T8519] Free swap = 124996kB [ 143.275500][ T8519] Total swap = 124996kB [ 143.279664][ T8519] 2097051 pages RAM [ 143.283471][ T8519] 0 pages HighMem/MovableOnly [ 143.288634][ T8519] 424690 pages reserved [ 143.292797][ T8519] 0 pages cma reserved [ 143.324166][ T8523] tipc: MTU too low for tipc bearer [ 143.339944][ T8524] tipc: MTU too low for tipc bearer [ 143.394780][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.498113][ T8259] veth0_vlan: entered promiscuous mode [ 143.575819][ T8259] veth1_vlan: entered promiscuous mode [ 143.650695][ T8279] veth0_vlan: entered promiscuous mode [ 143.688241][ T8279] veth1_vlan: entered promiscuous mode [ 143.751090][ T8259] veth0_macvtap: entered promiscuous mode [ 143.780429][ T8259] veth1_macvtap: entered promiscuous mode [ 143.863187][ T8279] veth0_macvtap: entered promiscuous mode [ 143.882027][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.908817][ T8279] veth1_macvtap: entered promiscuous mode [ 143.928060][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.955298][ T8551] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 143.968377][ T8259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.984557][ T8259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.993303][ T8259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.008185][ T8259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.082902][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.101534][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.183661][ T8279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.196359][ T8279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.206354][ T8279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.215842][ T8279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.229358][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.258540][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.355859][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.380887][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.399538][ T8565] __nla_validate_parse: 8 callbacks suppressed [ 144.399554][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 144.437456][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.484106][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.563576][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.580850][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.658748][ T8569] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.713'. [ 144.678121][ T8572] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.713'. [ 144.822018][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 144.831327][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 145.088554][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.239284][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.372708][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.578112][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.586842][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.591509][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.606847][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.618913][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.628630][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.851219][ T1151] bridge_slave_1: left allmulticast mode [ 145.857457][ T1151] bridge_slave_1: left promiscuous mode [ 145.864161][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.874957][ T1151] bridge_slave_0: left allmulticast mode [ 145.880640][ T1151] bridge_slave_0: left promiscuous mode [ 145.887574][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.265136][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 146.285274][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 146.305754][ T8613] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 146.360166][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.369204][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.379817][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.389034][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.398214][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.407057][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.409250][ T1151] bond0 (unregistering): Released all slaves [ 146.421826][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.486895][ T8594] chnl_net:caif_netlink_parms(): no params data found [ 146.640291][ T8622] Cannot find add_set index 0 as target [ 146.640937][ T8624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.918553][ T8639] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 146.998222][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 147.051157][ T8647] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 147.076076][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 147.217953][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.251835][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.264241][ T8594] bridge_slave_0: entered allmulticast mode [ 147.283417][ T8594] bridge_slave_0: entered promiscuous mode [ 147.310296][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.327464][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.358518][ T8594] bridge_slave_1: entered allmulticast mode [ 147.375689][ T8594] bridge_slave_1: entered promiscuous mode [ 147.408887][ T8669] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.424989][ T1151] hsr_slave_0: left promiscuous mode [ 147.431117][ T1151] hsr_slave_1: left promiscuous mode [ 147.433207][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 147.445742][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.445779][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.462717][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.474746][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.491967][ T8675] netlink: 'syz.3.738': attribute type 8 has an invalid length. [ 147.508086][ T1151] veth1_macvtap: left promiscuous mode [ 147.513729][ T1151] veth0_macvtap: left promiscuous mode [ 147.520721][ T1151] veth1_vlan: left promiscuous mode [ 147.527614][ T1151] veth0_vlan: left promiscuous mode [ 147.725553][ T5845] Bluetooth: hci1: command tx timeout [ 147.962053][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 148.001117][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 148.453923][ T5845] Bluetooth: hci4: command tx timeout [ 148.523571][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.655555][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.765064][ T8704] netlink: 'syz.4.744': attribute type 6 has an invalid length. [ 148.776564][ T8704] netlink: 'syz.4.744': attribute type 5 has an invalid length. [ 148.785870][ T8689] netlink: 'syz.3.741': attribute type 12 has an invalid length. [ 148.801239][ T8697] pim6reg1: entered promiscuous mode [ 148.806960][ T8697] pim6reg1: entered allmulticast mode [ 148.869057][ T8594] team0: Port device team_slave_0 added [ 148.931920][ T8594] team0: Port device team_slave_1 added [ 148.960614][ T8616] chnl_net:caif_netlink_parms(): no params data found [ 149.032099][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.046614][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.081192][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.126332][ T8710] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 149.162037][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.192322][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.199837][ T8715] nbd: illegal input index -8454144 [ 149.267372][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.298343][ T8721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.344465][ T8721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.413135][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.423337][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.430669][ T8616] bridge_slave_0: entered allmulticast mode [ 149.438702][ T8616] bridge_slave_0: entered promiscuous mode [ 149.447103][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.454381][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.461638][ T8616] bridge_slave_1: entered allmulticast mode [ 149.469950][ T8616] bridge_slave_1: entered promiscuous mode [ 149.511609][ T8594] hsr_slave_0: entered promiscuous mode [ 149.519620][ T8594] hsr_slave_1: entered promiscuous mode [ 149.553020][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.610697][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.637848][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.700991][ T8616] team0: Port device team_slave_0 added [ 149.720506][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.741900][ T8616] team0: Port device team_slave_1 added [ 149.804750][ T5845] Bluetooth: hci1: command tx timeout [ 149.811968][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.828384][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.836236][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.867771][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.916914][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.940377][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.956141][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.992910][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.163239][ T8616] hsr_slave_0: entered promiscuous mode [ 150.175428][ T8616] hsr_slave_1: entered promiscuous mode [ 150.201715][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.216715][ T8616] Cannot create hsr debugfs directory [ 150.458012][ T1151] bridge_slave_1: left allmulticast mode [ 150.471853][ T1151] bridge_slave_1: left promiscuous mode [ 150.478714][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.492518][ T1151] bridge_slave_0: left allmulticast mode [ 150.500077][ T1151] bridge_slave_0: left promiscuous mode [ 150.512428][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.524390][ T5845] Bluetooth: hci4: command tx timeout [ 150.531406][ T8755] openvswitch: netlink: Missing key (keys=40, expected=100) [ 150.548002][ T8755] netlink: 'syz.2.759': attribute type 21 has an invalid length. [ 150.556815][ T8755] __nla_validate_parse: 9 callbacks suppressed [ 150.556870][ T8755] netlink: 128 bytes leftover after parsing attributes in process `syz.2.759'. [ 150.892744][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.903421][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.916047][ T1151] bond0 (unregistering): Released all slaves [ 150.936992][ T8765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.762'. [ 150.960632][ T8765] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 150.970195][ T8765] netlink: 244 bytes leftover after parsing attributes in process `syz.4.762'. [ 151.009857][ T8755] netlink: 3 bytes leftover after parsing attributes in process `syz.2.759'. [ 151.045441][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 151.104378][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 151.113565][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 151.172837][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 151.188826][ T8768] team0: Device is already in use. [ 151.370283][ T8777] ip6tnl2: entered promiscuous mode [ 151.383294][ T8777] ip6tnl2: entered allmulticast mode [ 151.414414][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 151.458559][ T8783] netlink: 'syz.3.767': attribute type 5 has an invalid length. [ 151.483262][ T1151] hsr_slave_0: left promiscuous mode [ 151.490578][ T1151] hsr_slave_1: left promiscuous mode [ 151.512800][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.522863][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.557364][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.583991][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.620576][ T1151] veth1_macvtap: left promiscuous mode [ 151.634513][ T1151] veth0_macvtap: left promiscuous mode [ 151.650766][ T1151] veth1_vlan: left promiscuous mode [ 151.667856][ T1151] veth0_vlan: left promiscuous mode [ 151.675638][ T8792] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 151.884153][ T5845] Bluetooth: hci1: command tx timeout [ 152.243463][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 152.282460][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 152.604393][ T5845] Bluetooth: hci4: command tx timeout [ 152.947529][ T8825] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 152.951763][ T8823] netlink: 148 bytes leftover after parsing attributes in process `syz.2.779'. [ 152.960093][ T8825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.158921][ T8594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.185993][ T8594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.205396][ T8594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.223189][ T8594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.225694][ T8834] sctp: [Deprecated]: syz.4.785 (pid 8834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.225694][ T8834] Use struct sctp_sack_info instead [ 153.236535][ T8836] netlink: 'syz.2.784': attribute type 11 has an invalid length. [ 153.348751][ T8844] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 153.400817][ T8844] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.410669][ T8844] bond5: (slave bond6): making interface the new active one [ 153.418814][ T8844] bond5: (slave bond6): Enslaving as an active interface with an up link [ 153.438424][ T8616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.458333][ T8844] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 153.470209][ T8844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.478142][ T8616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.508260][ T8616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.528937][ T8616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.621120][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.661619][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.690144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.697298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.720082][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.727386][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.823695][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.869540][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.892899][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.900130][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.922629][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.929867][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.977710][ T5845] Bluetooth: hci1: command tx timeout [ 154.297878][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.419492][ T8594] veth0_vlan: entered promiscuous mode [ 154.450555][ T8594] veth1_vlan: entered promiscuous mode [ 154.486821][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.523273][ T8594] veth0_macvtap: entered promiscuous mode [ 154.565353][ T8594] veth1_macvtap: entered promiscuous mode [ 154.638647][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.677312][ T8616] veth0_vlan: entered promiscuous mode [ 154.694791][ T5845] Bluetooth: hci4: command tx timeout [ 154.719336][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.730665][ T8594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.740553][ T8594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.750297][ T8594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.760737][ T8594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.798577][ T8616] veth1_vlan: entered promiscuous mode [ 154.949177][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.950934][ T8910] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 154.959150][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.966892][ T8616] veth0_macvtap: entered promiscuous mode [ 155.023754][ T8616] veth1_macvtap: entered promiscuous mode [ 155.070773][ T8914] xt_hashlimit: overflow, rate too high: 0 [ 155.097255][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.109169][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.116185][ T8914] xt_hashlimit: overflow, rate too high: 0 [ 155.124621][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.130467][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.149579][ T8616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.164975][ T8616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.173950][ T8616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.182719][ T8616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.229960][ T8921] netlink: 'syz.4.807': attribute type 5 has an invalid length. [ 155.320526][ T7917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.349981][ T7917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.421394][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.437358][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.641805][ T8925] tipc: New replicast peer: 255.255.255.255 [ 155.664850][ T8925] tipc: Enabled bearer , priority 10 [ 155.672999][ T8925] __nla_validate_parse: 6 callbacks suppressed [ 155.673016][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 155.689038][ T8925] tipc: Disabling bearer [ 155.748212][ T8927] netlink: 'syz.3.809': attribute type 11 has an invalid length. [ 155.757222][ T8927] netlink: 'syz.3.809': attribute type 11 has an invalid length. [ 155.765352][ T8927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.809'. [ 155.777517][ T8927] netlink: 92 bytes leftover after parsing attributes in process `syz.3.809'. [ 156.038343][ T8938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.070391][ T8938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.351117][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.712422][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.976710][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.986162][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.994967][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.003456][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.012767][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.052801][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.192618][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 157.277015][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 157.334742][ T8957] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 157.370672][ T8954] netem: unknown loss type 0 [ 157.376873][ T8954] netem: change failed [ 157.401429][ T8961] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.420575][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.432951][ T8962] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 157.452654][ T8962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.818'. [ 157.652964][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.669727][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.685238][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.692967][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.702159][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.710045][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.728641][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.740596][ T8944] bridge_slave_0: entered allmulticast mode [ 157.751561][ T8944] bridge_slave_0: entered promiscuous mode [ 157.766784][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.781696][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.793749][ T8944] bridge_slave_1: entered allmulticast mode [ 157.802269][ T8944] bridge_slave_1: entered promiscuous mode [ 157.840385][ T5911] IPVS: starting estimator thread 0... [ 157.844650][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.855116][ T8976] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.867652][ T8978] tipc: Enabling of bearer rejected, failed to enable media [ 157.912076][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.954018][ T8980] IPVS: using max 33 ests per chain, 79200 per kthread [ 158.054255][ T8987] netlink: 'syz.2.825': attribute type 7 has an invalid length. [ 158.132926][ T8944] team0: Port device team_slave_0 added [ 158.166292][ T8944] team0: Port device team_slave_1 added [ 158.249619][ T8992] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 158.258022][ T8992] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 158.296061][ T8999] tipc: New replicast peer: 255.255.255.255 [ 158.302729][ T8999] tipc: Enabled bearer , priority 10 [ 158.310666][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.320850][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.350303][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.382887][ T1151] bridge_slave_1: left allmulticast mode [ 158.389485][ T1151] bridge_slave_1: left promiscuous mode [ 158.396376][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.416267][ T1151] bridge_slave_0: left allmulticast mode [ 158.429011][ T1151] bridge_slave_0: left promiscuous mode [ 158.439725][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.841590][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.863300][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.907306][ T1151] bond0 (unregistering): Released all slaves [ 158.942944][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.955058][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.999343][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.084593][ T5153] Bluetooth: hci1: command tx timeout [ 159.319808][ T8944] hsr_slave_0: entered promiscuous mode [ 159.348786][ T8944] hsr_slave_1: entered promiscuous mode [ 159.362273][ T9039] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 159.368599][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.382727][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 159.394006][ T8944] Cannot create hsr debugfs directory [ 159.424561][ T9] tipc: Node number set to 757989376 [ 159.483069][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.600456][ T1151] hsr_slave_0: left promiscuous mode [ 159.620732][ T1151] hsr_slave_1: left promiscuous mode [ 159.639054][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.649014][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.667885][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.678265][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 159.696519][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.728702][ T1151] veth1_macvtap: left promiscuous mode [ 159.734500][ T1151] veth0_macvtap: left promiscuous mode [ 159.740088][ T1151] veth1_vlan: left promiscuous mode [ 159.745540][ T1151] veth0_vlan: left promiscuous mode [ 159.780409][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 159.804615][ T5153] Bluetooth: hci4: command tx timeout [ 160.128572][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 160.164901][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 160.671760][ T9067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.013317][ T8971] chnl_net:caif_netlink_parms(): no params data found [ 161.035339][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 161.164674][ T5153] Bluetooth: hci1: command tx timeout [ 161.385232][ T9114] x_tables: unsorted entry at hook 3 [ 161.426299][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.455274][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.462616][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.474268][ T8971] bridge_slave_0: entered allmulticast mode [ 161.481434][ T8971] bridge_slave_0: entered promiscuous mode [ 161.511688][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.530560][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.537954][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.545280][ T8971] bridge_slave_1: entered allmulticast mode [ 161.553492][ T8971] bridge_slave_1: entered promiscuous mode [ 161.582017][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 161.617848][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.672368][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.685343][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.711241][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.821777][ T8971] team0: Port device team_slave_0 added [ 161.837223][ T8971] team0: Port device team_slave_1 added [ 161.884312][ T5153] Bluetooth: hci4: command tx timeout [ 161.929755][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.936912][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.963532][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.981878][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.992916][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.019518][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.192330][ T8971] hsr_slave_0: entered promiscuous mode [ 162.200273][ T8971] hsr_slave_1: entered promiscuous mode [ 162.213236][ T8971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.233344][ T8971] Cannot create hsr debugfs directory [ 162.338879][ T8944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.360680][ T8944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.379416][ T1151] bridge_slave_1: left allmulticast mode [ 162.389148][ T1151] bridge_slave_1: left promiscuous mode [ 162.398425][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.411855][ T1151] bridge_slave_0: left allmulticast mode [ 162.420192][ T1151] bridge_slave_0: left promiscuous mode [ 162.429409][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.551823][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 162.771387][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.782284][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.792387][ T1151] bond0 (unregistering): Released all slaves [ 162.822388][ T9133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.839774][ T8944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.932293][ T8944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.245187][ T5153] Bluetooth: hci1: command tx timeout [ 163.301336][ T9164] ipvlan0: entered promiscuous mode [ 163.306751][ T9164] ipvlan0: entered allmulticast mode [ 163.312473][ T9164] veth0_vlan: entered allmulticast mode [ 163.383987][ T1151] hsr_slave_0: left promiscuous mode [ 163.397155][ T1151] hsr_slave_1: left promiscuous mode [ 163.406947][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.420476][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.421721][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 163.442880][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.454344][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.478271][ T1151] veth1_macvtap: left promiscuous mode [ 163.478927][ T9170] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 163.484278][ T1151] veth0_macvtap: left promiscuous mode [ 163.499313][ T1151] veth1_vlan: left promiscuous mode [ 163.516626][ T1151] veth0_vlan: left promiscuous mode [ 163.885339][ T9186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.879'. [ 163.900127][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.879'. [ 163.967635][ T5153] Bluetooth: hci4: command tx timeout [ 164.214841][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 164.250045][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 164.715091][ T9204] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 164.750546][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 164.774705][ T9207] veth0: entered promiscuous mode [ 164.797799][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 164.822271][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.896305][ T9207] veth0 (unregistering): left promiscuous mode [ 164.981409][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.996864][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.004079][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.015526][ T9221] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 165.049271][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.056465][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.080339][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 165.122295][ T9223] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 165.150539][ T9223] netlink: 156 bytes leftover after parsing attributes in process `syz.4.891'. [ 165.324286][ T5153] Bluetooth: hci1: command tx timeout [ 165.330955][ T8971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.354558][ T8971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.381468][ T8971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.414046][ T8971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.531169][ T9242] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 165.557328][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.608455][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.649118][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.656333][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.669656][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.676878][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.800687][ T8971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.824993][ T9252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 165.842555][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.973016][ T9261] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 165.980345][ T8944] veth0_vlan: entered promiscuous mode [ 166.047860][ T5153] Bluetooth: hci4: command tx timeout [ 166.061597][ T9261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.116808][ T8944] veth1_vlan: entered promiscuous mode [ 166.252500][ T8944] veth0_macvtap: entered promiscuous mode [ 166.273014][ T8944] veth1_macvtap: entered promiscuous mode [ 166.312079][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.357628][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.379817][ T9285] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 166.388105][ T9285] __nla_validate_parse: 1 callbacks suppressed [ 166.388134][ T9285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.904'. [ 166.389406][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.421455][ T8944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.441932][ T8944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.476960][ T8944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.497577][ T8944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.520658][ T9285] dummy0: entered promiscuous mode [ 166.534013][ T9285] bridge0: port 3(dummy0) entered blocking state [ 166.547609][ T9285] bridge0: port 3(dummy0) entered disabled state [ 166.562761][ T9285] dummy0: entered allmulticast mode [ 166.571806][ T9285] bridge0: port 3(dummy0) entered blocking state [ 166.578348][ T9285] bridge0: port 3(dummy0) entered forwarding state [ 166.601287][ T9293] netlink: 80 bytes leftover after parsing attributes in process `syz.4.906'. [ 166.821322][ T9298] IPVS: Error connecting to the multicast addr [ 166.828204][ T8971] veth0_vlan: entered promiscuous mode [ 166.829886][ T9298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.841205][ T8971] veth1_vlan: entered promiscuous mode [ 166.883059][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.904495][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.952588][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.971411][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.997375][ T8971] veth0_macvtap: entered promiscuous mode [ 167.016769][ T8971] veth1_macvtap: entered promiscuous mode [ 167.070685][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.126939][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.159101][ T8971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.180404][ T8971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.189302][ T8971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.210319][ T8971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.282585][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 167.546798][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.575857][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.626655][ T9312] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 167.643060][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.652473][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.677896][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 167.687175][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 167.780782][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.937565][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.239960][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.472892][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.606060][ T36] bridge_slave_1: left allmulticast mode [ 168.611745][ T36] bridge_slave_1: left promiscuous mode [ 168.621072][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.632519][ T36] bridge_slave_0: left allmulticast mode [ 168.641190][ T36] bridge_slave_0: left promiscuous mode [ 168.654233][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.099812][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.122942][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.136827][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.150821][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.158748][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.196722][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.207227][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.219325][ T36] bond0 (unregistering): Released all slaves [ 169.504864][ T9324] chnl_net:caif_netlink_parms(): no params data found [ 169.638960][ T36] hsr_slave_0: left promiscuous mode [ 169.684293][ T36] hsr_slave_1: left promiscuous mode [ 169.691466][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.707782][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.713232][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.918'. [ 169.734818][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.742262][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.773501][ T36] veth1_macvtap: left promiscuous mode [ 169.793999][ T36] veth0_macvtap: left promiscuous mode [ 169.799611][ T36] veth1_vlan: left promiscuous mode [ 169.814510][ T36] veth0_vlan: left promiscuous mode [ 169.963316][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.977946][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.989159][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.997508][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.010527][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.291407][ T36] team0 (unregistering): Port device team_slave_1 removed [ 170.328553][ T36] team0 (unregistering): Port device team_slave_0 removed [ 170.936077][ T9369] tipc: Enabled bearer , priority 0 [ 170.960033][ T9374] x_tables: unsorted entry at hook 2 [ 170.970986][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.978532][ T9375] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 170.987163][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.996036][ T9324] bridge_slave_0: entered allmulticast mode [ 171.003251][ T9324] bridge_slave_0: entered promiscuous mode [ 171.012604][ T9369] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 171.020616][ T9369] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 171.035761][ T9375] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 171.053810][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.069941][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.077851][ T9324] bridge_slave_1: entered allmulticast mode [ 171.086014][ T9324] bridge_slave_1: entered promiscuous mode [ 171.174116][ T9383] netlink: 'syz.2.925': attribute type 8 has an invalid length. [ 171.220706][ T9383] IPv6: sit3: Disabled Multicast RS [ 171.245111][ T5845] Bluetooth: hci1: command tx timeout [ 171.251962][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.279691][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.310567][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 171.428464][ T9324] team0: Port device team_slave_0 added [ 171.449075][ T9324] team0: Port device team_slave_1 added [ 171.598460][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.630605][ T9356] chnl_net:caif_netlink_parms(): no params data found [ 171.667164][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.680794][ T9396] syz.2.929 (9396) used greatest stack depth: 17992 bytes left [ 171.692541][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.721586][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.758230][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.800189][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.810537][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.836738][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.891657][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.967453][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.975115][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.982343][ T9356] bridge_slave_0: entered allmulticast mode [ 171.989667][ T9356] bridge_slave_0: entered promiscuous mode [ 172.011298][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.032204][ T9324] hsr_slave_0: entered promiscuous mode [ 172.038718][ T9324] hsr_slave_1: entered promiscuous mode [ 172.044932][ T5845] Bluetooth: hci4: command tx timeout [ 172.051857][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.062338][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.069646][ T9356] bridge_slave_1: entered allmulticast mode [ 172.077600][ T9356] bridge_slave_1: entered promiscuous mode [ 172.176542][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.193651][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.243720][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.934'. [ 172.279197][ T9356] team0: Port device team_slave_0 added [ 172.305675][ T9356] team0: Port device team_slave_1 added [ 172.371945][ T9412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.382423][ T9411] tipc: Enabling of bearer rejected, failed to enable media [ 172.398361][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.406274][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.432899][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.444399][ T36] bridge_slave_1: left allmulticast mode [ 172.450067][ T36] bridge_slave_1: left promiscuous mode [ 172.456992][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.466208][ T36] bridge_slave_0: left allmulticast mode [ 172.471847][ T36] bridge_slave_0: left promiscuous mode [ 172.477780][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.778626][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.789847][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.799735][ T36] bond0 (unregistering): Released all slaves [ 172.819113][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.828599][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.878785][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.210276][ T9356] hsr_slave_0: entered promiscuous mode [ 173.225887][ T9356] hsr_slave_1: entered promiscuous mode [ 173.232244][ T9356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.246504][ T9356] Cannot create hsr debugfs directory [ 173.324117][ T5845] Bluetooth: hci1: command tx timeout [ 173.434786][ T36] hsr_slave_0: left promiscuous mode [ 173.449347][ T36] hsr_slave_1: left promiscuous mode [ 173.457168][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.465313][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.473348][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.484490][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.501385][ T36] veth1_macvtap: left promiscuous mode [ 173.507268][ T36] veth0_macvtap: left promiscuous mode [ 173.512941][ T36] veth1_vlan: left promiscuous mode [ 173.518405][ T36] veth0_vlan: left promiscuous mode [ 173.805033][ T7917] wlan1: Trigger new scan to find an IBSS to join [ 174.126120][ T5845] Bluetooth: hci4: command tx timeout [ 174.183401][ T36] team0 (unregistering): Port device team_slave_1 removed [ 174.223377][ T36] team0 (unregistering): Port device team_slave_0 removed [ 174.728339][ T9459] netlink: 'syz.2.948': attribute type 2 has an invalid length. [ 174.998931][ T9324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.034670][ T9324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.060640][ T9324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.088231][ T9476] netlink: 72 bytes leftover after parsing attributes in process `syz.3.954'. [ 175.103597][ T9324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.180681][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'. [ 175.190831][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'. [ 175.314379][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 175.394393][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.404612][ T5845] Bluetooth: hci1: command tx timeout [ 175.436056][ T9324] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.449092][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.456267][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.523633][ T9324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.550381][ T9324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.568428][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.575641][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.669659][ T9356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.691031][ T9356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.713081][ T9356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.731081][ T9356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.908382][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.976504][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.020816][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.071157][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.078378][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.102166][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.109377][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.182885][ T9324] veth0_vlan: entered promiscuous mode [ 176.211656][ T5845] Bluetooth: hci4: command tx timeout [ 176.216724][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.967'. [ 176.224571][ T9324] veth1_vlan: entered promiscuous mode [ 176.282545][ T9356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.376025][ T9548] gretap1: entered promiscuous mode [ 176.387912][ T9548] gretap1: entered allmulticast mode [ 176.470059][ T9324] veth0_macvtap: entered promiscuous mode [ 176.506912][ T9324] veth1_macvtap: entered promiscuous mode [ 176.561784][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.617969][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.667622][ T9324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.697996][ T9324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.715740][ T9324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.728247][ T9324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.768243][ T7917] wlan1: Trigger new scan to find an IBSS to join [ 176.826591][ T9566] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 176.844497][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'. [ 176.859059][ T9560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.898586][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.978'. [ 176.955532][ T9566] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 176.969092][ T9566] team0: Failed to send options change via netlink (err -105) [ 176.976862][ T9566] team0: Port device geneve0 added [ 177.023593][ T9560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.090607][ T9580] bond7: entered promiscuous mode [ 177.101481][ T9580] bond7: entered allmulticast mode [ 177.107411][ T9580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.114577][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 177.123423][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 177.217273][ T9580] bond7 (unregistering): Released all slaves [ 177.274679][ T9560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.330742][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.433655][ T9560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.485607][ T5845] Bluetooth: hci1: command tx timeout [ 177.515623][ T9595] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.573082][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.591095][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.680493][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.692658][ T9356] veth0_vlan: entered promiscuous mode [ 177.702256][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.740012][ T9560] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.777979][ T9356] veth1_vlan: entered promiscuous mode [ 177.830350][ T9560] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.890298][ T9560] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.939473][ T9560] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.981144][ T9356] veth0_macvtap: entered promiscuous mode [ 177.999961][ T9356] veth1_macvtap: entered promiscuous mode [ 178.030008][ T9610] C: renamed from lo [ 178.053038][ T9610] netlink: 'syz.2.990': attribute type 83 has an invalid length. [ 178.061353][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.070800][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.079419][ T9356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.095248][ T9356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.113210][ T9356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.134689][ T9356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.147412][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 178.157987][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 178.266803][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 178.284366][ T5845] Bluetooth: hci4: command tx timeout [ 178.325112][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.344182][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.454354][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.473903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.898260][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.016321][ T9656] openvswitch: netlink: IPv6 tunnel dst address is zero [ 179.027241][ T9656] bridge0: port 3(gretap0) entered blocking state [ 179.035781][ T9656] bridge0: port 3(gretap0) entered disabled state [ 179.047891][ T9656] gretap0: entered allmulticast mode [ 179.062948][ T9656] gretap0: entered promiscuous mode [ 179.070742][ T9656] bridge0: port 3(gretap0) entered blocking state [ 179.077509][ T9656] bridge0: port 3(gretap0) entered forwarding state [ 179.218925][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.307773][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.379469][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.556917][ T59] bridge_slave_1: left allmulticast mode [ 179.568201][ T59] bridge_slave_1: left promiscuous mode [ 179.574390][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.582646][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.592797][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.600976][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.608951][ T59] bridge_slave_0: left allmulticast mode [ 179.614841][ T59] bridge_slave_0: left promiscuous mode [ 179.617543][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.620589][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.629032][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.814325][ T13] wlan1: Trigger new scan to find an IBSS to join [ 179.949427][ T9668] delete_channel: no stack [ 179.966882][ T9666] delete_channel: no stack [ 180.083746][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.102505][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.120119][ T59] bond0 (unregistering): Released all slaves [ 180.128756][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 180.150598][ T9676] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1007'. [ 180.362987][ T9681] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 180.429427][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.452868][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.463910][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.483224][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.494132][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.727580][ T59] hsr_slave_0: left promiscuous mode [ 180.735589][ T59] hsr_slave_1: left promiscuous mode [ 180.741693][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.752160][ T1151] wlan1: Creating new IBSS network, BSSID ea:dd:9a:ea:1a:47 [ 180.757094][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.768537][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.777282][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.814510][ T59] veth1_macvtap: left promiscuous mode [ 180.820326][ T59] veth0_macvtap: left promiscuous mode [ 180.826698][ T59] veth1_vlan: left promiscuous mode [ 180.832167][ T59] veth0_vlan: left promiscuous mode [ 181.224662][ T59] team0 (unregistering): Port device team_slave_1 removed [ 181.262744][ T59] team0 (unregistering): Port device team_slave_0 removed [ 181.724006][ T5845] Bluetooth: hci1: command tx timeout [ 181.845565][ T9661] chnl_net:caif_netlink_parms(): no params data found [ 182.018302][ T9733] netlink: 'syz.4.1023': attribute type 4 has an invalid length. [ 182.303501][ T9755] netlink: 'syz.4.1026': attribute type 11 has an invalid length. [ 182.317246][ T9755] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1026'. [ 182.340450][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 182.369946][ T9752] veth0_vlan: entered allmulticast mode [ 182.382350][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.390024][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.399620][ T9661] bridge_slave_0: entered allmulticast mode [ 182.407494][ T9661] bridge_slave_0: entered promiscuous mode [ 182.416632][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.423752][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.431171][ T9661] bridge_slave_1: entered allmulticast mode [ 182.438764][ T9661] bridge_slave_1: entered promiscuous mode [ 182.461419][ T1151] tipc: Resetting bearer [ 182.557658][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 182.598160][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.608085][ T5845] Bluetooth: hci4: command tx timeout [ 182.614616][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 182.677692][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.741114][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.850028][ T9778] netlink: 'syz.3.1031': attribute type 32 has an invalid length. [ 182.851817][ T9661] team0: Port device team_slave_0 added [ 182.858165][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 182.877716][ T9661] team0: Port device team_slave_1 added [ 182.901329][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.932300][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.940188][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.947615][ T9686] bridge_slave_0: entered allmulticast mode [ 182.957520][ T9686] bridge_slave_0: entered promiscuous mode [ 182.965866][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.973719][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.981243][ T9686] bridge_slave_1: entered allmulticast mode [ 182.988513][ T9686] bridge_slave_1: entered promiscuous mode [ 182.995861][ T9778] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 183.062031][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.206301][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.245207][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.258494][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 183.273277][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.288910][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.316467][ T9661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.351541][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.399157][ T9792] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 183.415068][ T9792] bond7: (slave vcan1): Error -95 calling set_mac_address [ 183.427924][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.435226][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.461231][ T9661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.557342][ T9686] team0: Port device team_slave_0 added [ 183.616944][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 183.632886][ T9686] team0: Port device team_slave_1 added [ 183.747656][ T9661] hsr_slave_0: entered promiscuous mode [ 183.756110][ T9661] hsr_slave_1: entered promiscuous mode [ 183.806426][ T5845] Bluetooth: hci1: command tx timeout [ 183.908449][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.916453][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.942952][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.965083][ T9821] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1044'. [ 184.060854][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.071277][ T9821] bond0 (unregistering): Released all slaves [ 184.107657][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.118763][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.156434][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.227038][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 184.360031][ T9686] hsr_slave_0: entered promiscuous mode [ 184.372048][ T9686] hsr_slave_1: entered promiscuous mode [ 184.381410][ T9686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.388134][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 184.389550][ T9686] Cannot create hsr debugfs directory [ 184.405477][ T59] bridge_slave_1: left allmulticast mode [ 184.411141][ T59] bridge_slave_1: left promiscuous mode [ 184.418082][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.427120][ T59] bridge_slave_0: left allmulticast mode [ 184.432864][ T59] bridge_slave_0: left promiscuous mode [ 184.438841][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.469378][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 184.684002][ T5845] Bluetooth: hci4: command tx timeout [ 184.737024][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.748729][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.759066][ T59] bond0 (unregistering): Released all slaves [ 185.279164][ T9850] netlink: 'syz.2.1050': attribute type 11 has an invalid length. [ 185.295205][ T9850] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1050'. [ 185.374706][ T9855] openvswitch: netlink: IPv4 tun info is not correct [ 185.527098][ T59] hsr_slave_0: left promiscuous mode [ 185.543808][ T59] hsr_slave_1: left promiscuous mode [ 185.551805][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.570808][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.579348][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.590117][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.610378][ T59] veth1_macvtap: left promiscuous mode [ 185.619424][ T59] veth0_macvtap: left promiscuous mode [ 185.625109][ T59] veth1_vlan: left promiscuous mode [ 185.630371][ T59] veth0_vlan: left promiscuous mode [ 185.883985][ T5845] Bluetooth: hci1: command tx timeout [ 186.006330][ T59] team0 (unregistering): Port device team_slave_1 removed [ 186.045900][ T59] team0 (unregistering): Port device team_slave_0 removed [ 186.545523][ T9876] pim6reg: left allmulticast mode [ 186.657230][ T9884] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1060'. [ 186.764413][ T5845] Bluetooth: hci4: command tx timeout [ 186.946137][ T9661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.965552][ T9661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.984100][ T9661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.992898][ T9906] syz.3.1066 uses old SIOCAX25GETINFO [ 187.015378][ T9661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.219718][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.258815][ T9920] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1070'. [ 187.301165][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.329338][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.336532][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.376133][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.383335][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.385007][ T9925] blkio.reset_stats is deprecated [ 187.440157][ T9686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.467949][ T9686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.501574][ T9686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.548598][ T9686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.726292][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 187.878142][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.948974][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.965640][ T5845] Bluetooth: hci1: command tx timeout [ 187.980489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.987797][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.077510][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.084721][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.198251][ T9965] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.208653][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.299438][ T9965] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 188.332767][ T9661] veth0_vlan: entered promiscuous mode [ 188.396659][ T9661] veth1_vlan: entered promiscuous mode [ 188.481310][ T9981] __nla_validate_parse: 2 callbacks suppressed [ 188.481329][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 188.525341][ T9661] veth0_macvtap: entered promiscuous mode [ 188.532677][ T9984] tipc: Enabling of bearer rejected, failed to enable media [ 188.564763][ T9661] veth1_macvtap: entered promiscuous mode [ 188.621661][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.649131][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.678677][ T9661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.690672][ T9661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.705729][ T9661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.716007][ T9661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.854347][ T5153] Bluetooth: hci4: command tx timeout [ 188.975873][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 189.070658][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.104176][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.127450][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.265846][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 189.274850][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 189.350945][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 189.373510][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.392841][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.397017][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1089'. [ 189.427174][ T9686] veth0_vlan: entered promiscuous mode [ 189.456867][ T9686] veth1_vlan: entered promiscuous mode [ 189.530889][ T9686] veth0_macvtap: entered promiscuous mode [ 189.549194][ T9686] veth1_macvtap: entered promiscuous mode [ 189.608603][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.669030][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.722508][ T9686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.753902][ T9686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.762644][ T9686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.771520][ T9686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.960463][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.970604][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.059828][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.092609][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.137737][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 190.378808][ T4398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.468199][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.482904][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.491778][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.501768][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.518643][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.541503][ T4398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.696748][T10041] chnl_net:caif_netlink_parms(): no params data found [ 190.771171][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.778625][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.786036][T10041] bridge_slave_0: entered allmulticast mode [ 190.792999][T10041] bridge_slave_0: entered promiscuous mode [ 190.801932][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.809812][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.819721][T10041] bridge_slave_1: entered allmulticast mode [ 190.827107][T10041] bridge_slave_1: entered promiscuous mode [ 190.847308][ T4398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.890838][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.902904][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.934227][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 190.946763][ T4398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.993310][T10041] team0: Port device team_slave_0 added [ 191.022224][T10041] team0: Port device team_slave_1 added [ 191.064092][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.071073][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.097777][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.111194][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.118337][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.145692][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.232765][T10041] hsr_slave_0: entered promiscuous mode [ 191.239644][T10041] hsr_slave_1: entered promiscuous mode [ 191.248442][T10041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.257345][T10041] Cannot create hsr debugfs directory [ 191.318892][ T4398] bridge_slave_1: left allmulticast mode [ 191.325642][ T4398] bridge_slave_1: left promiscuous mode [ 191.331393][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.342328][ T4398] bridge_slave_0: left allmulticast mode [ 191.348540][ T4398] bridge_slave_0: left promiscuous mode [ 191.354984][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.780458][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.791134][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.801775][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.825615][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.833498][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.833643][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.857570][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.871655][ T4398] bond0 (unregistering): Released all slaves [ 192.074910][T10041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.184699][T10041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.231007][ T4398] hsr_slave_0: left promiscuous mode [ 192.237004][ T4398] hsr_slave_1: left promiscuous mode [ 192.242724][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.254416][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.274947][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.282415][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.349189][ T4398] veth1_macvtap: left promiscuous mode [ 192.355801][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 192.370584][ T4398] veth0_macvtap: left promiscuous mode [ 192.381763][ T4398] veth1_vlan: left promiscuous mode [ 192.393167][ T4398] veth0_vlan: left promiscuous mode [ 192.554314][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.610635][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.618960][ T5153] Bluetooth: hci1: command tx timeout [ 192.626733][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.635638][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.644863][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.652517][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.970738][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 193.012224][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 193.471158][T10041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.617679][T10041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.788679][T10094] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1105'. [ 193.813286][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 193.884605][ T5838] Bluetooth: hci3: command tx timeout [ 193.891586][T10050] chnl_net:caif_netlink_parms(): no params data found [ 193.914820][T10094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1105'. [ 194.188422][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.196756][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.204603][T10050] bridge_slave_0: entered allmulticast mode [ 194.212388][T10050] bridge_slave_0: entered promiscuous mode [ 194.226185][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258025][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.267637][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.275609][T10050] bridge_slave_1: entered allmulticast mode [ 194.283351][T10050] bridge_slave_1: entered promiscuous mode [ 194.311673][T10041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.331287][T10041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.399173][T10041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.415862][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.429414][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.480656][ T4398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.508136][T10041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.566838][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1112'. [ 194.625502][T10050] team0: Port device team_slave_0 added [ 194.684757][ T5153] Bluetooth: hci1: command tx timeout [ 194.684762][ T5845] Bluetooth: hci4: command tx timeout [ 194.702756][ T4398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.727294][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 194.731207][T10050] team0: Port device team_slave_1 added [ 194.876220][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 194.899978][ T4398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.922424][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.933915][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.962005][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.978473][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.985586][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.025274][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.039005][T10067] chnl_net:caif_netlink_parms(): no params data found [ 195.082720][ T4398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.222961][T10050] hsr_slave_0: entered promiscuous mode [ 195.239155][T10050] hsr_slave_1: entered promiscuous mode [ 195.576874][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.585979][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.593242][T10067] bridge_slave_0: entered allmulticast mode [ 195.601956][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'. [ 195.603239][T10067] bridge_slave_0: entered promiscuous mode [ 195.622512][T10176] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 195.682256][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.694144][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.715390][T10067] bridge_slave_1: entered allmulticast mode [ 195.722480][T10067] bridge_slave_1: entered promiscuous mode [ 195.783192][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.798775][ T4398] bridge_slave_1: left allmulticast mode [ 195.805528][ T4398] bridge_slave_1: left promiscuous mode [ 195.811301][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.822387][ T4398] bridge_slave_0: left allmulticast mode [ 195.829051][ T4398] bridge_slave_0: left promiscuous mode [ 195.836690][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.974069][ T5845] Bluetooth: hci3: command tx timeout [ 196.122921][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.139706][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.149995][ T4398] bond0 (unregistering): Released all slaves [ 196.168064][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.181079][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.294573][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 196.381846][T10067] team0: Port device team_slave_0 added [ 196.392979][T10067] team0: Port device team_slave_1 added [ 196.397031][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 196.423079][T10041] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.561767][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.569067][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.588176][T10067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.618068][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.659018][T10067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.675250][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 196.711096][T10067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.718261][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.746476][T10067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.766205][ T5845] Bluetooth: hci1: command tx timeout [ 196.772335][ T5838] Bluetooth: hci4: command tx timeout [ 196.818948][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.826102][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.846747][ T4398] hsr_slave_0: left promiscuous mode [ 196.857843][ T4398] hsr_slave_1: left promiscuous mode [ 196.863795][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.872019][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.880098][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.888143][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.907297][ T4398] veth1_macvtap: left promiscuous mode [ 196.913172][ T4398] veth0_macvtap: left promiscuous mode [ 196.919209][ T4398] veth1_vlan: left promiscuous mode [ 196.925025][ T4398] veth0_vlan: left promiscuous mode [ 197.300066][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 197.338836][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 197.837907][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 197.952879][T10067] hsr_slave_0: entered promiscuous mode [ 197.973034][T10067] hsr_slave_1: entered promiscuous mode [ 197.980034][T10067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.987893][T10067] Cannot create hsr debugfs directory [ 197.999077][T10217] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.010439][T10216] x_tables: duplicate entry at hook 3 [ 198.049670][ T5838] Bluetooth: hci3: command tx timeout [ 198.098006][T10219] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 198.476608][T10050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.511052][T10050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.549751][T10050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.637917][T10050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.746647][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.779810][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 198.807620][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 198.844009][ T5838] Bluetooth: hci1: command tx timeout [ 198.852690][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 198.854847][ T5838] Bluetooth: hci4: command tx timeout [ 198.869147][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 198.907616][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 198.941098][T10041] veth0_vlan: entered promiscuous mode [ 198.982207][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 199.025523][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 199.042059][T10041] veth1_vlan: entered promiscuous mode [ 199.069406][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 199.117128][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 199.141182][T10244] netlink: 'syz.3.1143': attribute type 9 has an invalid length. [ 199.186434][T10041] veth0_macvtap: entered promiscuous mode [ 199.205850][T10041] veth1_macvtap: entered promiscuous mode [ 199.238808][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.321298][T10041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.342790][T10050] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.377788][T10041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.387443][T10067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.412785][T10041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.422680][T10041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.432045][T10041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.441269][T10041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.452117][T10067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.465672][T10067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.481600][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.488812][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.527236][T10067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.552906][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.560181][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.864383][ T7917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.866601][T10050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.872739][ T7917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.024446][ T7917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.032315][ T7917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.111033][T10067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.125119][ T5838] Bluetooth: hci3: command tx timeout [ 200.132221][T10293] __nla_validate_parse: 2 callbacks suppressed [ 200.132238][T10293] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1154'. [ 200.157017][T10067] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.253243][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.260507][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.277905][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.285126][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.578917][ T165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.623544][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.671614][ T165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.767987][ T165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.865974][T10050] veth0_vlan: entered promiscuous mode [ 200.900173][T10050] veth1_vlan: entered promiscuous mode [ 200.930912][ T5838] Bluetooth: hci4: command tx timeout [ 201.013681][T10050] veth0_macvtap: entered promiscuous mode [ 201.101501][ T165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.160077][T10050] veth1_macvtap: entered promiscuous mode [ 201.243517][T10050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.281700][T10050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.309039][T10067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.345336][T10050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.360235][T10050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.375011][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.383201][T10050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.389638][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.401240][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.411261][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.414198][T10050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.420292][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.514896][T10334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.601545][T10336] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1168'. [ 201.668920][ T165] bridge_slave_1: left allmulticast mode [ 201.675446][ T165] bridge_slave_1: left promiscuous mode [ 201.681136][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.690285][ T165] bridge_slave_0: left allmulticast mode [ 201.696266][ T165] bridge_slave_0: left promiscuous mode [ 201.702012][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.028527][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.039047][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.049169][ T165] bond0 (unregistering): Released all slaves [ 202.096464][T10067] veth0_vlan: entered promiscuous mode [ 202.237329][T10067] veth1_vlan: entered promiscuous mode [ 202.249262][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.276125][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.361624][T10345] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1171'. [ 202.432310][T10347] xt_HMARK: spi-set and port-set can't be combined [ 202.448029][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.476387][T10067] veth0_macvtap: entered promiscuous mode [ 202.478055][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.503743][ T165] hsr_slave_0: left promiscuous mode [ 202.515977][ T165] hsr_slave_1: left promiscuous mode [ 202.516425][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'. [ 202.522115][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.533691][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 202.555240][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.563398][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.576000][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.596562][ T165] veth1_macvtap: left promiscuous mode [ 202.602109][ T165] veth0_macvtap: left promiscuous mode [ 202.609013][ T165] veth1_vlan: left promiscuous mode [ 202.614714][ T165] veth0_vlan: left promiscuous mode [ 203.052614][ T165] team0 (unregistering): Port device team_slave_1 removed [ 203.090160][ T165] team0 (unregistering): Port device team_slave_0 removed [ 203.484441][ T5845] Bluetooth: hci1: command tx timeout [ 203.496949][T10067] veth1_macvtap: entered promiscuous mode [ 203.644743][T10360] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1177'. [ 203.669665][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 203.730334][T10067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.765498][T10326] chnl_net:caif_netlink_parms(): no params data found [ 203.833785][T10067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.960854][T10067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.973926][T10067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.982679][T10067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.998732][T10067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.152905][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.169575][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.179767][T10326] bridge_slave_0: entered allmulticast mode [ 204.191123][T10326] bridge_slave_0: entered promiscuous mode [ 204.236513][ T165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.252885][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.260599][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.268693][T10326] bridge_slave_1: entered allmulticast mode [ 204.276618][T10326] bridge_slave_1: entered promiscuous mode [ 204.321722][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.327269][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.336637][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.348976][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.383665][ T165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.438007][T10326] team0: Port device team_slave_0 added [ 204.452671][T10326] team0: Port device team_slave_1 added [ 204.510682][ T165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.538277][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.547166][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.631323][ T165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.652906][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.660165][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.696587][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.739196][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.753997][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.783145][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.926032][T10326] hsr_slave_0: entered promiscuous mode [ 204.932474][T10326] hsr_slave_1: entered promiscuous mode [ 204.938749][T10326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.948840][T10326] Cannot create hsr debugfs directory [ 205.026570][ T165] bridge_slave_1: left allmulticast mode [ 205.032246][ T165] bridge_slave_1: left promiscuous mode [ 205.038087][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.047202][ T165] bridge_slave_0: left allmulticast mode [ 205.052846][ T165] bridge_slave_0: left promiscuous mode [ 205.059206][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.532423][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.542821][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.550597][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.560094][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.567156][ T5153] Bluetooth: hci1: command tx timeout [ 205.576598][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.577130][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.592950][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.597214][ T165] bond0 (unregistering): Released all slaves [ 205.928561][ T165] hsr_slave_0: left promiscuous mode [ 205.935849][ T165] hsr_slave_1: left promiscuous mode [ 205.941649][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.949601][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.958382][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.966257][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.984860][ T165] veth1_macvtap: left promiscuous mode [ 205.990404][ T165] veth0_macvtap: left promiscuous mode [ 205.996184][ T165] veth1_vlan: left promiscuous mode [ 206.001451][ T165] veth0_vlan: left promiscuous mode [ 206.222396][T10383] validate_nla: 11 callbacks suppressed [ 206.222411][T10383] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 206.241271][T10383] netlink: 'syz.4.1182': attribute type 3 has an invalid length. [ 206.249160][T10383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1182'. [ 206.616993][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 206.658277][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.673676][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.681596][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.711280][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.721225][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.793426][T10399] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 206.856186][ T165] team0 (unregistering): Port device team_slave_1 removed [ 206.892906][ T165] team0 (unregistering): Port device team_slave_0 removed [ 207.529531][T10374] chnl_net:caif_netlink_parms(): no params data found [ 207.628026][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 207.645421][ T5845] Bluetooth: hci3: command tx timeout [ 207.652020][ T5838] Bluetooth: hci1: command tx timeout [ 207.851795][T10432] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1194'. [ 207.866204][T10429] Bluetooth: MGMT ver 1.23 [ 207.873184][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'. [ 207.937748][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.950106][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.958376][T10374] bridge_slave_0: entered allmulticast mode [ 207.970009][T10374] bridge_slave_0: entered promiscuous mode [ 208.017986][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.030121][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.037474][T10374] bridge_slave_1: entered allmulticast mode [ 208.050990][T10374] bridge_slave_1: entered promiscuous mode [ 208.062680][T10326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.100803][T10326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.117208][T10439] 8021q: VLANs not supported on ip6_vti0 [ 208.125806][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.150014][T10326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.168849][T10374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.196340][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1197'. [ 208.219036][T10326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.283371][ T165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.320785][T10374] team0: Port device team_slave_0 added [ 208.330790][T10374] team0: Port device team_slave_1 added [ 208.347994][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1198'. [ 208.413351][ T165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.428649][T10447] netem: incorrect ge model size [ 208.434477][T10447] netem: change failed [ 208.473746][T10374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.481148][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.507569][T10374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.561217][ T165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.580272][T10395] chnl_net:caif_netlink_parms(): no params data found [ 208.603375][T10374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.612028][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.643747][T10374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.705938][ T165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.766365][ T5838] Bluetooth: hci4: command tx timeout [ 208.953150][T10374] hsr_slave_0: entered promiscuous mode [ 208.961671][T10374] hsr_slave_1: entered promiscuous mode [ 209.126908][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.134577][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.142279][T10395] bridge_slave_0: entered allmulticast mode [ 209.149650][T10395] bridge_slave_0: entered promiscuous mode [ 209.195212][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.202567][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.209866][T10395] bridge_slave_1: entered allmulticast mode [ 209.218287][T10395] bridge_slave_1: entered promiscuous mode [ 209.280666][T10395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.318740][T10395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.388707][T10395] team0: Port device team_slave_0 added [ 209.430116][ T165] bridge_slave_1: left allmulticast mode [ 209.436054][ T165] bridge_slave_1: left promiscuous mode [ 209.442257][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.455809][ T165] bridge_slave_0: left allmulticast mode [ 209.462761][ T165] bridge_slave_0: left promiscuous mode [ 209.468644][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.557776][T10481] netlink: 163948 bytes leftover after parsing attributes in process `syz.3.1208'. [ 209.725745][ T5838] Bluetooth: hci1: command tx timeout [ 209.726110][ T5845] Bluetooth: hci3: command tx timeout [ 209.797110][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.808261][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.820040][ T165] bond0 (unregistering): Released all slaves [ 209.836591][T10395] team0: Port device team_slave_1 added [ 209.969945][T10483] netlink: 'syz.3.1209': attribute type 23 has an invalid length. [ 209.992656][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.000367][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.027148][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.041618][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.048800][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.075163][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.157110][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 210.227254][T10395] hsr_slave_0: entered promiscuous mode [ 210.234891][T10395] hsr_slave_1: entered promiscuous mode [ 210.241271][T10395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.249859][T10395] Cannot create hsr debugfs directory [ 210.292136][T10494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1213'. [ 210.440752][ T165] hsr_slave_0: left promiscuous mode [ 210.458399][ T165] hsr_slave_1: left promiscuous mode [ 210.465138][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.472605][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.481132][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.489608][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.506995][ T165] veth1_macvtap: left promiscuous mode [ 210.512525][ T165] veth0_macvtap: left promiscuous mode [ 210.518869][ T165] veth1_vlan: left promiscuous mode [ 210.524469][ T165] veth0_vlan: left promiscuous mode [ 210.856092][ T5845] Bluetooth: hci4: command tx timeout [ 210.964861][ T165] team0 (unregistering): Port device team_slave_1 removed [ 211.019842][ T165] team0 (unregistering): Port device team_slave_0 removed [ 211.452038][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.554484][T10512] __nla_validate_parse: 1 callbacks suppressed [ 211.554502][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 211.561242][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.576915][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1219'. [ 211.612975][T10374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.693755][T10374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.708472][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.715788][T10009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.733290][T10515] bridge_slave_0: left allmulticast mode [ 211.739169][T10515] bridge_slave_0: left promiscuous mode [ 211.745174][T10515] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.755167][T10515] bridge_slave_1: left allmulticast mode [ 211.760861][T10515] bridge_slave_1: left promiscuous mode [ 211.766969][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.784637][T10515] team0: Port device team_slave_0 removed [ 211.798960][T10515] team0: Port device team_slave_1 removed [ 211.805118][ T5845] Bluetooth: hci3: command tx timeout [ 211.813796][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.821764][T10515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.831311][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.849995][T10515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.869138][T10515] team0: Port device vlan0 removed [ 211.887440][T10515] bond5: (slave bond6): Releasing backup interface [ 211.896203][T10515] bond5: (slave bond6): the permanent HWaddr of slave - 1a:a1:23:5c:93:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 211.918707][T10515] bond5: (slave gretap1): making interface the new active one [ 211.930792][T10515] bond5: (slave gretap1): Releasing backup interface [ 211.940428][T10374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.989536][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.996747][T10009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.010159][T10374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.128404][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 212.137584][T10531] netlink: 'syz.4.1222': attribute type 5 has an invalid length. [ 212.158900][T10531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1222'. [ 212.556766][T10541] team0: Port device team_slave_0 removed [ 212.567968][T10395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.578877][T10543] sctp: [Deprecated]: syz.3.1225 (pid 10543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.578877][T10543] Use struct sctp_sack_info instead [ 212.597115][T10543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1225'. [ 212.619603][T10395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.637328][T10395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.649684][T10395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.668257][T10374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.721685][T10374] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.737247][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.770014][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.777158][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.792556][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.799688][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.863814][T10326] veth0_vlan: entered promiscuous mode [ 212.910982][T10326] veth1_vlan: entered promiscuous mode [ 212.926070][ T5845] Bluetooth: hci4: command tx timeout [ 213.025165][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.106701][T10326] veth0_macvtap: entered promiscuous mode [ 213.120839][T10395] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.142328][T10326] veth1_macvtap: entered promiscuous mode [ 213.162706][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.169928][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.200626][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.207912][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.301550][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.326970][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.370740][T10326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.383465][T10326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.392931][T10326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.402848][T10326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.413988][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 213.425263][ T59] ------------[ cut here ]------------ [ 213.430751][ T59] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 213.441995][ T59] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 213.456343][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.456369][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.456380][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 213.456417][ T59] Call Trace: [ 213.456425][ T59] [ 213.456433][ T59] dump_stack_lvl+0x189/0x250 [ 213.456462][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.456484][ T59] ? __pfx__printk+0x10/0x10 [ 213.456516][ T59] ubsan_epilogue+0xa/0x40 [ 213.456533][ T59] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 213.456571][ T59] ieee80211_request_ibss_scan+0x600/0x8b0 [ 213.456610][ T59] ieee80211_ibss_work+0xd85/0x1060 [ 213.456631][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.456654][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 213.456676][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.456697][ T59] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 213.456724][ T59] ? skb_dequeue+0x10e/0x150 [ 213.456738][ T59] ? ieee80211_iface_work+0xcdb/0xfe0 [ 213.456764][ T59] ? ieee80211_iface_work+0xf39/0xfe0 [ 213.456789][ T59] ? rcu_is_watching+0x15/0xb0 [ 213.456818][ T59] cfg80211_wiphy_work+0x2dc/0x460 [ 213.456836][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 213.456861][ T59] process_scheduled_works+0xae1/0x17b0 [ 213.456919][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.456960][ T59] worker_thread+0x8a0/0xda0 [ 213.456979][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.457009][ T59] ? __kthread_parkme+0x7b/0x200 [ 213.457037][ T59] kthread+0x70e/0x8a0 [ 213.457059][ T59] ? __pfx_worker_thread+0x10/0x10 [ 213.457080][ T59] ? __pfx_kthread+0x10/0x10 [ 213.457101][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.457121][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.457140][ T59] ? __pfx_kthread+0x10/0x10 [ 213.457158][ T59] ret_from_fork+0x3f9/0x770 [ 213.457184][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 213.457212][ T59] ? __switch_to_asm+0x39/0x70 [ 213.457228][ T59] ? __switch_to_asm+0x33/0x70 [ 213.457243][ T59] ? __pfx_kthread+0x10/0x10 [ 213.457263][ T59] ret_from_fork_asm+0x1a/0x30 [ 213.457298][ T59] [ 213.457305][ T59] ---[ end trace ]--- [ 213.589542][T10374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.737246][ T59] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 213.744507][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 213.756501][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.766571][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 213.772834][ T59] Call Trace: [ 213.776109][ T59] [ 213.779036][ T59] dump_stack_lvl+0x99/0x250 [ 213.783630][ T59] ? __asan_memcpy+0x40/0x70 [ 213.788309][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.793508][ T59] ? __pfx__printk+0x10/0x10 [ 213.798102][ T59] panic+0x2db/0x790 [ 213.802002][ T59] ? __pfx_panic+0x10/0x10 [ 213.806411][ T59] ? _printk+0xcf/0x120 [ 213.810570][ T59] ? __pfx__printk+0x10/0x10 [ 213.815160][ T59] check_panic_on_warn+0x89/0xb0 [ 213.820136][ T59] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 213.825854][ T59] ieee80211_request_ibss_scan+0x600/0x8b0 [ 213.832187][ T59] ieee80211_ibss_work+0xd85/0x1060 [ 213.837379][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.842571][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 213.848465][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.854787][ T59] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 213.860414][ T59] ? skb_dequeue+0x10e/0x150 [ 213.864991][ T59] ? ieee80211_iface_work+0xcdb/0xfe0 [ 213.870360][ T59] ? ieee80211_iface_work+0xf39/0xfe0 [ 213.875738][ T59] ? rcu_is_watching+0x15/0xb0 [ 213.880501][ T59] cfg80211_wiphy_work+0x2dc/0x460 [ 213.885607][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 213.891322][ T59] process_scheduled_works+0xae1/0x17b0 [ 213.896884][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.902874][ T59] worker_thread+0x8a0/0xda0 [ 213.907627][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.913955][ T59] ? __kthread_parkme+0x7b/0x200 [ 213.918888][ T59] kthread+0x70e/0x8a0 [ 213.922950][ T59] ? __pfx_worker_thread+0x10/0x10 [ 213.928055][ T59] ? __pfx_kthread+0x10/0x10 [ 213.932636][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.937826][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.943013][ T59] ? __pfx_kthread+0x10/0x10 [ 213.947598][ T59] ret_from_fork+0x3f9/0x770 [ 213.952185][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 213.957292][ T59] ? __switch_to_asm+0x39/0x70 [ 213.962043][ T59] ? __switch_to_asm+0x33/0x70 [ 213.966793][ T59] ? __pfx_kthread+0x10/0x10 [ 213.971376][ T59] ret_from_fork_asm+0x1a/0x30 [ 213.976149][ T59] [ 213.979453][ T59] Kernel Offset: disabled [ 213.983871][ T59] Rebooting in 86400 seconds..